Done. Thanks for the ACK.
-Mike
________________________________________
From: scap-security-guide-bounces(a)lists.fedorahosted.org
[scap-security-guide-bounces(a)lists.fedorahosted.org] on behalf of Jeffrey Blank
[blank(a)eclipse.ncsc.mil]
Sent: Tuesday, August 07, 2012 11:54 AM
To: scap-security-guide(a)lists.fedorahosted.org
Subject: Re: [PATCH] Fixed root virtual console logins check.
Uh, yes. Thanks -- good catch.
Assuming it always behaved how it looked (you never know with OVAL!)
please go ahead and commit the fix.
On 08/06/2012 01:15 PM, Michael Palmiotto wrote:
Shouldn't we be doing a "none_exist" check on this
one?
Signed-off-by: Michael Palmiotto <mpalmiotto(a)tresys.com>
---
.../checks/securetty_root_login_console_only.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/checks/securetty_root_login_console_only.xml
b/RHEL6/input/checks/securetty_root_login_console_only.xml
index c3472e6..1bb1de3 100644
--- a/RHEL6/input/checks/securetty_root_login_console_only.xml
+++ b/RHEL6/input/checks/securetty_root_login_console_only.xml
@@ -15,7 +15,7 @@
</criteria>
</definition>
- <ind:textfilecontent54_test check="all"
check_existence="all_exist" comment="virtual consoles /etc/securetty"
id="test_virtual_consoles_etc_securetty" version="1">
+ <ind:textfilecontent54_test check="all"
check_existence="none_exist" comment="virtual consoles /etc/securetty"
id="test_virtual_consoles_etc_securetty" version="1">
<ind:object object_ref="object_virtual_consoles_etc_securetty" />
</ind:textfilecontent54_test>
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide