[PATCH] Fixed root virtual console logins check.

Michael Palmiotto mpalmiotto at tresys.com
Tue Aug 7 17:19:16 UTC 2012


Done.  Thanks for the ACK.

-Mike
________________________________________
From: scap-security-guide-bounces at lists.fedorahosted.org [scap-security-guide-bounces at lists.fedorahosted.org] on behalf of Jeffrey Blank [blank at eclipse.ncsc.mil]
Sent: Tuesday, August 07, 2012 11:54 AM
To: scap-security-guide at lists.fedorahosted.org
Subject: Re: [PATCH] Fixed root virtual console logins check.

Uh, yes.  Thanks -- good catch.
Assuming it always behaved how it looked (you never know with OVAL!)
please go ahead and commit the fix.



On 08/06/2012 01:15 PM, Michael Palmiotto wrote:
> Shouldn't we be doing a "none_exist" check on this one?
>
> Signed-off-by: Michael Palmiotto <mpalmiotto at tresys.com>
> ---
>  .../checks/securetty_root_login_console_only.xml   |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/input/checks/securetty_root_login_console_only.xml b/RHEL6/input/checks/securetty_root_login_console_only.xml
> index c3472e6..1bb1de3 100644
> --- a/RHEL6/input/checks/securetty_root_login_console_only.xml
> +++ b/RHEL6/input/checks/securetty_root_login_console_only.xml
> @@ -15,7 +15,7 @@
>      </criteria>
>    </definition>
>
> -  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="virtual consoles /etc/securetty" id="test_virtual_consoles_etc_securetty" version="1">
> +  <ind:textfilecontent54_test check="all" check_existence="none_exist" comment="virtual consoles /etc/securetty" id="test_virtual_consoles_etc_securetty" version="1">
>      <ind:object object_ref="object_virtual_consoles_etc_securetty" />
>    </ind:textfilecontent54_test>
>
_______________________________________________
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list