[PATCH 05/18] Created OVAL check for /etc/httpd/conf directory permissions.

Willy Santos wsantos at redhat.com
Thu Apr 12 00:29:21 UTC 2012


---
 .../src/input/checks/dir_perms_etc_httpd_conf.xml  |   37 ++++++++++++++++++++
 1 files changed, 37 insertions(+), 0 deletions(-)
 create mode 100644 rhel6/src/input/checks/dir_perms_etc_httpd_conf.xml

diff --git a/rhel6/src/input/checks/dir_perms_etc_httpd_conf.xml b/rhel6/src/input/checks/dir_perms_etc_httpd_conf.xml
new file mode 100644
index 0000000..5153185
--- /dev/null
+++ b/rhel6/src/input/checks/dir_perms_etc_httpd_conf.xml
@@ -0,0 +1,37 @@
+<def-group>
+  <definition class="compliance" id="dir_perms_etc_httpd_conf" version="1">
+    <metadata>
+      <title>Directory /etc/httpd/conf/ Permissions</title>
+      <affected family="unix">
+        <platform>Red Hat Enterprise Linux 6</platform>
+      </affected>
+      <reference ref_id="TODO:CCE" source="CCE" />
+      <description>Directory permissions for /etc/httpd/conf/ should be set to 0750.</description>
+    </metadata>
+    <criteria>
+      <criterion test_ref="test_dir_perms_etc_httpd_conf" />
+    </criteria>
+  </definition>
+
+  <unix:file_test check="all" check_existence="all_exist" comment="Testing directory permissions" id="test_dir_perms_etc_httpd_conf" version="1">
+    <unix:object object_ref="object_dir_perms_etc_httpd_conf" />
+    <unix:state state_ref="state_dir_perms_etc_httpd_conf" />
+  </unix:file_test>
+
+  <unix:file_object comment="/etc/httpd/conf/" id="object_dir_perms_etc_httpd_conf" version="1">
+    <unix:path>/etc/httpd/conf</unix:path>
+    <unix:filename xsi:nil="true" />
+  </unix:file_object>
+
+  <unix:file_state id="state_dir_perms_etc_httpd_conf" version="1">
+    <unix:uread datatype="boolean">true</unix:uread>
+    <unix:uwrite datatype="boolean">true</unix:uwrite>
+    <unix:uexec datatype="boolean">true</unix:uexec>
+    <unix:gread datatype="boolean">true</unix:gread>
+    <unix:gwrite datatype="boolean">false</unix:gwrite>
+    <unix:gexec datatype="boolean">true</unix:gexec>
+    <unix:oread datatype="boolean">false</unix:oread>
+    <unix:owrite datatype="boolean">false</unix:owrite>
+    <unix:oexec datatype="boolean">false</unix:oexec>
+  </unix:file_state>
+</def-group>
-- 
1.7.7.6


--------------060302030708000108020305
Content-Type: text/x-patch;
 name="0006-Created-OVAL-check-for-var-log-httpd-directory-permi.patch"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
 filename*0="0006-Created-OVAL-check-for-var-log-httpd-directory-permi.pa";
 filename*1="tch"



More information about the scap-security-guide mailing list