>From e93a48578a4763fd8491b5c6eae42afda441f433 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 14 Apr 2013 03:48:22 -0400 Subject: [PATCH 2/5] Fixed rsyslog_files_ownership OVAL - Descriptions were wrong, updated to reflect /var/log checking - Updated file pattern match, as not all logfiles within /var/log end in *.log! Before Change: $ sudo sh -c "chown shawn /var/log/messages" $ ./testcheck.py rsyslog_files_ownership.xml Evaluating with OVAL tempfile : /tmp/rsyslog_files_ownershipUr9KWm.xml Definition oval:scap-security-guide.testing:def:104: true Evaluation done. After Change: $ sudo sh -c "chown shawn /var/log/messages" $ ./testcheck.py rsyslog_files_ownership.xml Evaluating with OVAL tempfile : /tmp/rsyslog_files_ownershipvFE2iM.xml Definition oval:scap-security-guide.testing:def:104: false Evaluation done. $ sudo sh -c "chown -R root /var/log/" $ ./testcheck.py rsyslog_files_ownership.xml Evaluating with OVAL tempfile : /tmp/rsyslog_files_ownershipFdQB3H.xml Definition oval:scap-security-guide.testing:def:104: true Evaluation done. --- RHEL6/input/checks/rsyslog_files_ownership.xml | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/RHEL6/input/checks/rsyslog_files_ownership.xml b/RHEL6/input/checks/rsyslog_files_ownership.xml index 05bc20e..937dbe8 100644 --- a/RHEL6/input/checks/rsyslog_files_ownership.xml +++ b/RHEL6/input/checks/rsyslog_files_ownership.xml @@ -7,21 +7,21 @@ Red Hat Enterprise Linux 6 All syslog log files should be owned by the - appropriate user. + root user. - + - + - + /var/log - .*log + . -- 1.7.1