>From db4268b80b4c5a5b8fbd750a27c240e07ec49abc Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 27 Dec 2013 02:50:50 -0500 Subject: [PATCH 27/31] shared/file_permissions_binary_dirs --> RHEL6 & RHEL7 - Linked shared/file_permissions_binary_dirs to rhel6 & rhel7 after testing - Updated CPE info - Created symlinks --- .../input/checks/file_permissions_binary_dirs.xml | 116 +-------------------- .../input/checks/file_permissions_binary_dirs.xml | 1 + shared/oval/file_permissions_binary_dirs.xml | 2 + 3 files changed, 4 insertions(+), 115 deletions(-) mode change 100644 => 120000 RHEL/6/input/checks/file_permissions_binary_dirs.xml create mode 120000 RHEL/7/input/checks/file_permissions_binary_dirs.xml diff --git a/RHEL/6/input/checks/file_permissions_binary_dirs.xml b/RHEL/6/input/checks/file_permissions_binary_dirs.xml deleted file mode 100644 index 1b16414..0000000 --- a/RHEL/6/input/checks/file_permissions_binary_dirs.xml +++ /dev/null @@ -1,115 +0,0 @@ - - - - Verify that System Executables Have Restrictive Permissions - - Red Hat Enterprise Linux 6 - - Checks that /bin, /usr/bin, /usr/local/bin, /sbin, /usr/sbin, /usr/local/sbin, and objects therein, - are not group-writable or world-writable. - - - - - - - - - - - - - - - - - - - - /bin - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - - - - - - - /usr/bin - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - - - - - - - /usr/local/bin - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - - - - - - - /sbin - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - - - - - - - /usr/sbin - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - - - - - - - /usr/local/sbin - ^.*$ - state_perms_nogroupwrite_noworldwrite - state_symlink - - - - - symbolic link - - - - true - true - - - diff --git a/RHEL/6/input/checks/file_permissions_binary_dirs.xml b/RHEL/6/input/checks/file_permissions_binary_dirs.xml new file mode 120000 index 0000000..981cebb --- /dev/null +++ b/RHEL/6/input/checks/file_permissions_binary_dirs.xml @@ -0,0 +1 @@ +../../../../shared/oval/file_permissions_binary_dirs.xml \ No newline at end of file diff --git a/RHEL/7/input/checks/file_permissions_binary_dirs.xml b/RHEL/7/input/checks/file_permissions_binary_dirs.xml new file mode 120000 index 0000000..981cebb --- /dev/null +++ b/RHEL/7/input/checks/file_permissions_binary_dirs.xml @@ -0,0 +1 @@ +../../../../shared/oval/file_permissions_binary_dirs.xml \ No newline at end of file diff --git a/shared/oval/file_permissions_binary_dirs.xml b/shared/oval/file_permissions_binary_dirs.xml index 22e5a39..2bf6bdd 100644 --- a/shared/oval/file_permissions_binary_dirs.xml +++ b/shared/oval/file_permissions_binary_dirs.xml @@ -4,6 +4,8 @@ Verify that System Executables Have Restrictive Permissions Fedora 19 + Red Hat Enterprise Linux 6 + Red Hat Enterprise Linux 7 Checks that binary files under /bin, /sbin, /usr/bin, /usr/sbin, -- 1.8.3.1