Signed-off-by: Maura Dailey <maura(a)eclipse.ncsc.mil>
---
.../checks/accounts_dangerous_path_for_root.xml | 53 ++++++++++----------
1 files changed, 27 insertions(+), 26 deletions(-)
diff --git a/RHEL6/input/checks/accounts_dangerous_path_for_root.xml
b/RHEL6/input/checks/accounts_dangerous_path_for_root.xml
index 52ffa6f..efc4f0d 100644
--- a/RHEL6/input/checks/accounts_dangerous_path_for_root.xml
+++ b/RHEL6/input/checks/accounts_dangerous_path_for_root.xml
@@ -16,49 +16,50 @@
<criterion comment="environment variable PATH doesn't contain relative
paths" test_ref="test_env_var_contains_relative_path" />
</criteria>
</definition>
- <ind:environmentvariable_test check="none satisfy"
comment="environment variable PATH starts with : or ."
id="test_env_var_begins" version="1">
+ <ind:environmentvariable58_test check="none satisfy"
comment="environment variable PATH starts with : or ."
id="test_env_var_begins" version="1">
<ind:object object_ref="object_env_var_path" />
<ind:state state_ref="state_begins_colon_period" />
- </ind:environmentvariable_test>
- <ind:environmentvariable_test check="none satisfy"
comment="environment variable PATH contains : twice in a row"
id="test_env_var_contains_doublecolon" version="1">
+ </ind:environmentvariable58_test>
+ <ind:environmentvariable58_test check="none satisfy"
comment="environment variable PATH contains : twice in a row"
id="test_env_var_contains_doublecolon" version="1">
<ind:object object_ref="object_env_var_path" />
<ind:state state_ref="state_contains_double_colon" />
- </ind:environmentvariable_test>
- <ind:environmentvariable_test check="none satisfy"
comment="environment variable PATH contains . twice in a row"
id="test_env_var_contains_doubleperiod" version="1">
+ </ind:environmentvariable58_test>
+ <ind:environmentvariable58_test check="none satisfy"
comment="environment variable PATH contains . twice in a row"
id="test_env_var_contains_doubleperiod" version="1">
<ind:object object_ref="object_env_var_path" />
<ind:state state_ref="state_contains_double_period" />
- </ind:environmentvariable_test>
- <ind:environmentvariable_test check="none satisfy"
comment="environment variable PATH ends with : or ."
id="test_env_var_ends" version="1">
+ </ind:environmentvariable58_test>
+ <ind:environmentvariable58_test check="none satisfy"
comment="environment variable PATH ends with : or ."
id="test_env_var_ends" version="1">
<ind:object object_ref="object_env_var_path" />
<ind:state state_ref="state_ends_colon_period" />
- </ind:environmentvariable_test>
- <ind:environmentvariable_test check="none satisfy"
comment="environment variable PATH starts with an absolute path /"
id="test_env_var_begins_slash" version="1">
+ </ind:environmentvariable58_test>
+ <ind:environmentvariable58_test check="none satisfy"
comment="environment variable PATH starts with an absolute path /"
id="test_env_var_begins_slash" version="1">
<ind:object object_ref="object_env_var_path" />
<ind:state state_ref="state_begins_slash" />
- </ind:environmentvariable_test>
- <ind:environmentvariable_test check="none satisfy"
comment="environment variable PATH contains relative paths"
id="test_env_var_contains_relative_path" version="1">
+ </ind:environmentvariable58_test>
+ <ind:environmentvariable58_test check="none satisfy"
comment="environment variable PATH contains relative paths"
id="test_env_var_contains_relative_path" version="1">
<ind:object object_ref="object_env_var_path" />
<ind:state state_ref="state_contains_relative_path" />
- </ind:environmentvariable_test>
- <ind:environmentvariable_object id="object_env_var_path"
version="1">
+ </ind:environmentvariable58_test>
+ <ind:environmentvariable58_object id="object_env_var_path"
version="1">
+ <ind:pid xsi:nil="true" datatype="int" />
<ind:name>PATH</ind:name>
- </ind:environmentvariable_object>
- <ind:environmentvariable_state comment="starts with colon or period"
id="state_begins_colon_period" version="1">
+ </ind:environmentvariable58_object>
+ <ind:environmentvariable58_state comment="starts with colon or period"
id="state_begins_colon_period" version="1">
<ind:value operation="pattern match">^[:\.]</ind:value>
- </ind:environmentvariable_state>
- <ind:environmentvariable_state comment="colon twice in a row"
id="state_contains_double_colon" version="1">
+ </ind:environmentvariable58_state>
+ <ind:environmentvariable58_state comment="colon twice in a row"
id="state_contains_double_colon" version="1">
<ind:value operation="pattern match">::</ind:value>
- </ind:environmentvariable_state>
- <ind:environmentvariable_state comment="period twice in a row"
id="state_contains_double_period" version="1">
+ </ind:environmentvariable58_state>
+ <ind:environmentvariable58_state comment="period twice in a row"
id="state_contains_double_period" version="1">
<ind:value operation="pattern match">\.\.</ind:value>
- </ind:environmentvariable_state>
- <ind:environmentvariable_state comment="ends with colon or period"
id="state_ends_colon_period" version="1">
+ </ind:environmentvariable58_state>
+ <ind:environmentvariable58_state comment="ends with colon or period"
id="state_ends_colon_period" version="1">
<ind:value operation="pattern match">[:\.]$</ind:value>
- </ind:environmentvariable_state>
- <ind:environmentvariable_state comment="begins with a slash"
id="state_begins_slash" version="1">
+ </ind:environmentvariable58_state>
+ <ind:environmentvariable58_state comment="begins with a slash"
id="state_begins_slash" version="1">
<ind:value operation="pattern match">^[^/]</ind:value>
- </ind:environmentvariable_state>
- <ind:environmentvariable_state comment="elements begin with a slash"
id="state_contains_relative_path" version="1">
+ </ind:environmentvariable58_state>
+ <ind:environmentvariable58_state comment="elements begin with a slash"
id="state_contains_relative_path" version="1">
<ind:value operation="pattern match">[^\\]:[^/]</ind:value>
- </ind:environmentvariable_state>
+ </ind:environmentvariable58_state>
</def-group>
--
1.7.1