>From 19a4ecd695ddadf3cedb87ccbed2270a7c2fe3cd Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Sun, 10 Nov 2013 00:15:08 -0500 Subject: [PATCH 02/11] OVAL rename, accounts_dangerous_path_for_root --> root_path_no_dot - OVAL name now matches other root_path_* checks --- .../checks/accounts_dangerous_path_for_root.xml | 86 -------------------- RHEL6/input/checks/root_path_no_dot.xml | 86 ++++++++++++++++++++ RHEL6/input/system/accounts/session.xml | 2 +- 3 files changed, 87 insertions(+), 87 deletions(-) delete mode 100644 RHEL6/input/checks/accounts_dangerous_path_for_root.xml create mode 100644 RHEL6/input/checks/root_path_no_dot.xml diff --git a/RHEL6/input/checks/accounts_dangerous_path_for_root.xml b/RHEL6/input/checks/accounts_dangerous_path_for_root.xml deleted file mode 100644 index 7e475c4..0000000 --- a/RHEL6/input/checks/accounts_dangerous_path_for_root.xml +++ /dev/null @@ -1,86 +0,0 @@ - - - - Ensure that No Dangerous Directories Exist in Root's Path - - Red Hat Enterprise Linux 6 - - The environment variable PATH should be set correctly for - the root user. - - - - - - - - - - - - - - PATH - - - - - - - - - - - - - - - - - - - - - - - - - - - ^[:\.] - - - :: - - - \.\. - - - [:\.]$ - - - ^[^/] - - - [^\\]:[^/] - - diff --git a/RHEL6/input/checks/root_path_no_dot.xml b/RHEL6/input/checks/root_path_no_dot.xml new file mode 100644 index 0000000..0d528b5 --- /dev/null +++ b/RHEL6/input/checks/root_path_no_dot.xml @@ -0,0 +1,86 @@ + + + + Ensure that No Dangerous Directories Exist in Root's Path + + Red Hat Enterprise Linux 6 + + The environment variable PATH should be set correctly for + the root user. + + + + + + + + + + + + + + PATH + + + + + + + + + + + + + + + + + + + + + + + + + + + ^[:\.] + + + :: + + + \.\. + + + [:\.]$ + + + ^[^/] + + + [^\\]:[^/] + + diff --git a/RHEL6/input/system/accounts/session.xml b/RHEL6/input/system/accounts/session.xml index ae71777..e500495 100644 --- a/RHEL6/input/system/accounts/session.xml +++ b/RHEL6/input/system/accounts/session.xml @@ -89,7 +89,7 @@ Including these entries increases the risk that root could execute code from an untrusted location. - + -- 1.7.1