[PATCH 06/18] Created OVAL check for /var/log/httpd directory permissions.
Willy Santos
wsantos at redhat.com
Thu Apr 12 00:30:22 UTC 2012
---
rhel6/src/input/checks/dir_perms_var_log_httpd.xml | 37 ++++++++++++++++++++
1 files changed, 37 insertions(+), 0 deletions(-)
create mode 100644 rhel6/src/input/checks/dir_perms_var_log_httpd.xml
diff --git a/rhel6/src/input/checks/dir_perms_var_log_httpd.xml b/rhel6/src/input/checks/dir_perms_var_log_httpd.xml
new file mode 100644
index 0000000..005ceeb
--- /dev/null
+++ b/rhel6/src/input/checks/dir_perms_var_log_httpd.xml
@@ -0,0 +1,37 @@
+<def-group>
+ <definition class="compliance" id="dir_perms_var_log_httpd" version="1">
+ <metadata>
+ <title>Directory /var/log/httpd/ Permissions</title>
+ <affected family="unix">
+ <platform>Red Hat Enterprise Linux 6</platform>
+ </affected>
+ <reference ref_id="CCE-4574-0" source="CCE" />
+ <description>Directory permissions for /var/log/httpd should be set to 0750.</description>
+ </metadata>
+ <criteria>
+ <criterion test_ref="test_dir_perms_var_log_httpd" />
+ </criteria>
+ </definition>
+
+ <unix:file_test check="all" check_existence="all_exist" comment="Testing directory permissions" id="test_dir_perms_var_log_httpd" version="1">
+ <unix:object object_ref="object_dir_perms_var_log_httpd" />
+ <unix:state state_ref="state_dir_perms_var_log_httpd" />
+ </unix:file_test>
+
+ <unix:file_object comment="/var/log/httpd/" id="object_dir_perms_var_log_httpd" version="1">
+ <unix:path>/var/log/httpd</unix:path>
+ <unix:filename xsi:nil="true" />
+ </unix:file_object>
+
+ <unix:file_state id="state_dir_perms_var_log_httpd" version="1">
+ <unix:uread datatype="boolean">true</unix:uread>
+ <unix:uwrite datatype="boolean">true</unix:uwrite>
+ <unix:uexec datatype="boolean">true</unix:uexec>
+ <unix:gread datatype="boolean">true</unix:gread>
+ <unix:gwrite datatype="boolean">false</unix:gwrite>
+ <unix:gexec datatype="boolean">true</unix:gexec>
+ <unix:oread datatype="boolean">false</unix:oread>
+ <unix:owrite datatype="boolean">false</unix:owrite>
+ <unix:oexec datatype="boolean">false</unix:oexec>
+ </unix:file_state>
+</def-group>
--
1.7.7.6
--------------060302030708000108020305
Content-Type: text/x-patch;
name="0007-Created-OVAL-checks-for-etc-httpd-conf-directory-and.patch"
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename*0="0007-Created-OVAL-checks-for-etc-httpd-conf-directory-and.pa";
filename*1="tch"
More information about the scap-security-guide
mailing list