>From 76a0a21fc9e537865bd9141cd6d8f66d01fa2bf3 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 15 Sep 2013 19:43:54 -0400 Subject: [PATCH 18/22] Added remediation for umask_for_daemons - OVAL/XCCDF namings - Added remediation script --- RHEL6/input/fixes/bash/umask_for_daemons.sh | 8 ++++++++ RHEL6/input/profiles/CS2.xml | 2 +- RHEL6/input/profiles/fisma-medium-rhel6-server.xml | 2 +- RHEL6/input/profiles/nist-CL-IL-AL.xml | 2 +- RHEL6/input/profiles/stig-rhel6-server.xml | 2 +- RHEL6/input/profiles/test.xml | 2 +- RHEL6/input/profiles/usgcb-rhel6-server.xml | 2 +- RHEL6/input/system/permissions/execution.xml | 2 +- 8 files changed, 15 insertions(+), 7 deletions(-) create mode 100644 RHEL6/input/fixes/bash/umask_for_daemons.sh diff --git a/RHEL6/input/fixes/bash/umask_for_daemons.sh b/RHEL6/input/fixes/bash/umask_for_daemons.sh new file mode 100644 index 0000000..bce47aa --- /dev/null +++ b/RHEL6/input/fixes/bash/umask_for_daemons.sh @@ -0,0 +1,8 @@ +source ./templates/support.sh +populate var_umask_for_daemons + +grep -q ^umask /etc/init.d/functions && \ + sed -i "s/umask.*/umask $var_umask_for_daemons/g" /etc/init.d/functions +if ! [ $? -eq 0 ]; then + echo "umask $var_umask_for_daemons" >> /etc/init.d/functions +fi diff --git a/RHEL6/input/profiles/CS2.xml b/RHEL6/input/profiles/CS2.xml index 57651e7..9e703fc 100644 --- a/RHEL6/input/profiles/CS2.xml +++ b/RHEL6/input/profiles/CS2.xml @@ -66,7 +66,7 @@ - - - - diff --git a/RHEL6/input/profiles/test.xml b/RHEL6/input/profiles/test.xml index a729046..f460ebb 100644 --- a/RHEL6/input/profiles/test.xml +++ b/RHEL6/input/profiles/test.xml @@ -49,7 +49,7 @@ + + diff --git a/RHEL6/input/system/permissions/execution.xml b/RHEL6/input/system/permissions/execution.xml index 0e2fb5d..e15f7ff 100644 --- a/RHEL6/input/system/permissions/execution.xml +++ b/RHEL6/input/system/permissions/execution.xml @@ -23,7 +23,7 @@ for system daemons. 027 - + Set Daemon Umask The file /etc/init.d/functions includes initialization parameters for most or all daemons started at boot time. The default umask of -- 1.7.1