NACK.  This check is not references by the XCCDF.  The right course of action is instead to delete this check.

Please run "make validate" if you are looking for OVAL that should probably be deleted.


On Mon, May 13, 2013 at 2:20 PM, Maura Dailey <maura@eclipse.ncsc.mil> wrote:

Signed-off-by: Maura Dailey <maura@eclipse.ncsc.mil>
---
 RHEL6/input/checks/xwindows_remote_listening.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/checks/xwindows_remote_listening.xml b/RHEL6/input/checks/xwindows_remote_listening.xml
index 0d5e5c9..cb4ef3d 100644
--- a/RHEL6/input/checks/xwindows_remote_listening.xml
+++ b/RHEL6/input/checks/xwindows_remote_listening.xml
@@ -24,7 +24,7 @@
   version="1">
     <ind:path>/etc/X11/xinit</ind:path>
     <ind:filename>xserverrc</ind:filename>
-    <ind:pattern operation="pattern match">^[\s]*exec\sX\s:0\s\-nolisten\stcp\s\$@</ind:pattern>
+    <ind:pattern operation="pattern match">^\s*exec\s*[ /\\\.\w]*X\s*:0\s*\-nolisten\s*tcp\s*["]?\$@["]?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 </def-group>
--
1.7.1

_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide