On 22/11/17 00:01, Olivier BONHOMME wrote:
If you have an entry point for doing such a check into the OVAL
language
spec, I would be happy to try to write the check :)
Hello,
These OVAL tests might help:
-
https://oval.mitre.org/language/version5.11/ovaldefinition/documentation/...
-
https://oval.mitre.org/language/version5.11/ovaldefinition/documentation/...
I think you can use password_state to get hold of a list of users' home
directory into a variable, and then use file_test to check for their
existence.
Below are some examples of the tests, they are not exactly what you
need, but you can get inspired by them :)
shared/checks/oval/no_files_unowned_by_user.xml
shared/checks/oval/accounts_password_all_shadowed.xml
shared/checks/oval/file_permissions_home_dirs.xml
--
Watson Sato
Security Technologies | Red Hat, Inc