[PATCH] Fixed root virtual console logins check.
Michael Palmiotto
mpalmiotto at tresys.com
Tue Aug 7 17:19:16 UTC 2012
Done. Thanks for the ACK.
-Mike
________________________________________
From: scap-security-guide-bounces at lists.fedorahosted.org [scap-security-guide-bounces at lists.fedorahosted.org] on behalf of Jeffrey Blank [blank at eclipse.ncsc.mil]
Sent: Tuesday, August 07, 2012 11:54 AM
To: scap-security-guide at lists.fedorahosted.org
Subject: Re: [PATCH] Fixed root virtual console logins check.
Uh, yes. Thanks -- good catch.
Assuming it always behaved how it looked (you never know with OVAL!)
please go ahead and commit the fix.
On 08/06/2012 01:15 PM, Michael Palmiotto wrote:
> Shouldn't we be doing a "none_exist" check on this one?
>
> Signed-off-by: Michael Palmiotto <mpalmiotto at tresys.com>
> ---
> .../checks/securetty_root_login_console_only.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/input/checks/securetty_root_login_console_only.xml b/RHEL6/input/checks/securetty_root_login_console_only.xml
> index c3472e6..1bb1de3 100644
> --- a/RHEL6/input/checks/securetty_root_login_console_only.xml
> +++ b/RHEL6/input/checks/securetty_root_login_console_only.xml
> @@ -15,7 +15,7 @@
> </criteria>
> </definition>
>
> - <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="virtual consoles /etc/securetty" id="test_virtual_consoles_etc_securetty" version="1">
> + <ind:textfilecontent54_test check="all" check_existence="none_exist" comment="virtual consoles /etc/securetty" id="test_virtual_consoles_etc_securetty" version="1">
> <ind:object object_ref="object_virtual_consoles_etc_securetty" />
> </ind:textfilecontent54_test>
>
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
More information about the scap-security-guide
mailing list