>From ac3f0027b727125257d0e79b4d39285207e431c1 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 27 Dec 2013 02:22:03 -0500 Subject: [PATCH 22/31] Moved userowner_group_file -> file_owner_etc_group, added to shared/ - Renamed XCCDF to match template style - Tested on RHEL7, updated CPE - Added to shared/ --- RHEL/6/input/auxiliary/stig_overlay.xml | 2 +- RHEL/6/input/checks/file_owner_etc_group.xml | 30 +--------------------- RHEL/6/input/profiles/CS2.xml | 2 +- RHEL/6/input/profiles/common.xml | 2 +- .../6/input/profiles/fisma-medium-rhel6-server.xml | 2 +- RHEL/6/input/profiles/nist-CL-IL-AL.xml | 2 +- RHEL/6/input/profiles/rht-ccp.xml | 2 +- RHEL/6/input/profiles/usgcb-rhel6-server.xml | 2 +- RHEL/6/input/system/permissions/files.xml | 2 +- RHEL/7/input/auxiliary/stig_overlay.xml | 2 +- RHEL/7/input/checks/file_owner_etc_group.xml | 1 + RHEL/7/input/profiles/rht-ccp.xml | 2 +- RHEL/7/input/system/permissions/files.xml | 2 +- shared/oval/file_owner_etc_group.xml | 29 +++++++++++++++++++++ 14 files changed, 42 insertions(+), 40 deletions(-) mode change 100644 => 120000 RHEL/6/input/checks/file_owner_etc_group.xml create mode 120000 RHEL/7/input/checks/file_owner_etc_group.xml create mode 100644 shared/oval/file_owner_etc_group.xml diff --git a/RHEL/6/input/auxiliary/stig_overlay.xml b/RHEL/6/input/auxiliary/stig_overlay.xml index 9848d2c..7ce2383 100644 --- a/RHEL/6/input/auxiliary/stig_overlay.xml +++ b/RHEL/6/input/auxiliary/stig_overlay.xml @@ -124,7 +124,7 @@ The /etc/passwd file must have mode 0644 or less permissive. - + The /etc/group file must be owned by root. diff --git a/RHEL/6/input/checks/file_owner_etc_group.xml b/RHEL/6/input/checks/file_owner_etc_group.xml deleted file mode 100644 index e6bc24c..0000000 --- a/RHEL/6/input/checks/file_owner_etc_group.xml +++ /dev/null @@ -1,29 +0,0 @@ - - - - Verify user who owns 'group' file - - Red Hat Enterprise Linux 6 - - The /etc/group file should be owned by the appropriate - user. - - - - - - - - - - - - 0 - - - /etc - group - - diff --git a/RHEL/6/input/checks/file_owner_etc_group.xml b/RHEL/6/input/checks/file_owner_etc_group.xml new file mode 120000 index 0000000..909d9b3 --- /dev/null +++ b/RHEL/6/input/checks/file_owner_etc_group.xml @@ -0,0 +1 @@ +../../../../shared/oval/file_owner_etc_group.xml \ No newline at end of file diff --git a/RHEL/6/input/profiles/CS2.xml b/RHEL/6/input/profiles/CS2.xml index 645966a..0d38147 100644 --- a/RHEL/6/input/profiles/CS2.xml +++ b/RHEL/6/input/profiles/CS2.xml @@ -157,7 +157,7 @@ + diff --git a/RHEL/6/input/profiles/common.xml b/RHEL/6/input/profiles/common.xml index 20d7d4f..dd68778 100644 --- a/RHEL/6/input/profiles/common.xml +++ b/RHEL/6/input/profiles/common.xml @@ -36,7 +36,7 @@ - diff --git a/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml b/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml index de9673a..e021f01 100644 --- a/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml +++ b/RHEL/6/input/profiles/fisma-medium-rhel6-server.xml @@ -42,7 +42,7 @@ + diff --git a/RHEL/6/input/profiles/nist-CL-IL-AL.xml b/RHEL/6/input/profiles/nist-CL-IL-AL.xml index 265b303..78e2adc 100644 --- a/RHEL/6/input/profiles/nist-CL-IL-AL.xml +++ b/RHEL/6/input/profiles/nist-CL-IL-AL.xml @@ -136,7 +136,7 @@ assurance." + diff --git a/RHEL/6/input/profiles/rht-ccp.xml b/RHEL/6/input/profiles/rht-ccp.xml index c1be635..7dadbdc 100644 --- a/RHEL/6/input/profiles/rht-ccp.xml +++ b/RHEL/6/input/profiles/rht-ccp.xml @@ -76,7 +76,7 @@ + diff --git a/RHEL/6/input/profiles/usgcb-rhel6-server.xml b/RHEL/6/input/profiles/usgcb-rhel6-server.xml index a390a3e..e2c7690 100644 --- a/RHEL/6/input/profiles/usgcb-rhel6-server.xml +++ b/RHEL/6/input/profiles/usgcb-rhel6-server.xml @@ -40,7 +40,7 @@ + diff --git a/RHEL/6/input/system/permissions/files.xml b/RHEL/6/input/system/permissions/files.xml index 197e4ae..caa7938 100644 --- a/RHEL/6/input/system/permissions/files.xml +++ b/RHEL/6/input/system/permissions/files.xml @@ -59,7 +59,7 @@ which could weaken the system security posture. - + Verify User Who Owns <tt>group</tt> File diff --git a/RHEL/7/input/auxiliary/stig_overlay.xml b/RHEL/7/input/auxiliary/stig_overlay.xml index bf24f96..dd61f3c 100644 --- a/RHEL/7/input/auxiliary/stig_overlay.xml +++ b/RHEL/7/input/auxiliary/stig_overlay.xml @@ -124,7 +124,7 @@ The /etc/passwd file must have mode 0644 or less permissive. - + The /etc/group file must be owned by root. diff --git a/RHEL/7/input/checks/file_owner_etc_group.xml b/RHEL/7/input/checks/file_owner_etc_group.xml new file mode 120000 index 0000000..909d9b3 --- /dev/null +++ b/RHEL/7/input/checks/file_owner_etc_group.xml @@ -0,0 +1 @@ +../../../../shared/oval/file_owner_etc_group.xml \ No newline at end of file diff --git a/RHEL/7/input/profiles/rht-ccp.xml b/RHEL/7/input/profiles/rht-ccp.xml index d6c5275..1be219f 100644 --- a/RHEL/7/input/profiles/rht-ccp.xml +++ b/RHEL/7/input/profiles/rht-ccp.xml @@ -75,7 +75,7 @@ FILE PERMISSION CHECKS + diff --git a/RHEL/7/input/system/permissions/files.xml b/RHEL/7/input/system/permissions/files.xml index 38ee361..1ed6110 100644 --- a/RHEL/7/input/system/permissions/files.xml +++ b/RHEL/7/input/system/permissions/files.xml @@ -59,7 +59,7 @@ which could weaken the system security posture. - + Verify User Who Owns <tt>group</tt> File diff --git a/shared/oval/file_owner_etc_group.xml b/shared/oval/file_owner_etc_group.xml new file mode 100644 index 0000000..6a773d6 --- /dev/null +++ b/shared/oval/file_owner_etc_group.xml @@ -0,0 +1,29 @@ + + + + Verify user who owns 'group' file + + Red Hat Enterprise Linux 6 + Red Hat Enterprise Linux 7 + + The /etc/group file should be owned by the appropriate + user. + + + + + + + + + + + + 0 + + + /etc/group + + -- 1.8.3.1