This is a notification of push of (slightly modified) OVAL code
submitted by Rui, as described here:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-July/00...
Thanks Rui!
Ideally we would be able to "pass" any setuid/setgid program
that was installed as part of an RPM. Til then, this is a big
improvement from the previous check (which could never pass).
Furthermore, this is easy for other users to tailor to their
environments.
It also gets "make validate" (OVAL schematron validation) closer to passing,
since it corrects the use of the deprecated check_existence="none_exist"
attribute in the unix:file_test.
Jeffrey Blank (2):
Added line to indicate test output file, to OVAL testing script
new versions of unauth suid/sgid OVAL checks
.../checks/file_permissions_unauthorized_sgid.xml | 60 ++++++++++++--
.../checks/file_permissions_unauthorized_suid.xml | 86 +++++++++++++++++--
RHEL6/input/checks/testcheck.py | 1 +
3 files changed, 129 insertions(+), 18 deletions(-)