This patch adds OVAL check for 'Verify that Shared Library Files Have Restrictive
Permissions'
rule for Fedora.
It is a re-implementation / simplification against currently used RHEL-6 form:
[1]
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/inpu...
Instead of having dedicated tests for each of /lib, /lib64, /usr/lib &&
/usr/lib64
directories (and checking based on 'equals' operation), it uses just one test
for each of library permissions checks and files' permissions within those libraries
check (and checks based on 'pattern match' operation).
Passed basic sanity && regression testing.
Please review (especially in relation with existing RHEL-6 form if
we would like to use this proposal also for particular RHEL-6 OVAL check
in the future).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team