[PATCH 0/3] Audit granularity and minor bugfixes

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Aug 23 18:13:53 UTC 2012


Excellent -- please push these!

(And pardon my slow response -- in the middle of a move.)



On 08/22/2012 02:30 AM, Kevin Spargur wrote:
> Increased the granularity of DAC mod auditing and some housekeeping.
> 
> Kevin Spargur (3):
>   Permissions cleanup on profiles
>   Increased granularity for auditing of DAC modification
>   Minor bugfix/typo
> 
>  .../checks/audit_rules_dac_modification_chmod.xml  |   77 ++++
>  .../checks/audit_rules_dac_modification_chown.xml  |   77 ++++
>  .../checks/audit_rules_dac_modification_fchmod.xml |   77 ++++
>  .../audit_rules_dac_modification_fchmodat.xml      |   77 ++++
>  .../checks/audit_rules_dac_modification_fchown.xml |   77 ++++
>  .../audit_rules_dac_modification_fchownat.xml      |   77 ++++
>  .../audit_rules_dac_modification_fremovexattr.xml  |   77 ++++
>  .../audit_rules_dac_modification_fsetxattr.xml     |   77 ++++
>  .../checks/audit_rules_dac_modification_lchown.xml |   77 ++++
>  .../audit_rules_dac_modification_lremovexattr.xml  |   77 ++++
>  .../audit_rules_dac_modification_lsetxattr.xml     |   77 ++++
>  .../audit_rules_dac_modification_removexattr.xml   |   77 ++++
>  .../audit_rules_dac_modification_setxattr.xml      |   77 ++++
>  RHEL6/input/checks/postfix_logging.xml             |    2 +-
>  RHEL6/input/profiles/common.xml                    |   18 +-
>  RHEL6/input/services/ftp.xml                       |    3 +-
>  RHEL6/input/system/auditing.xml                    |  367 +++++++++++++++++++-
>  17 files changed, 1379 insertions(+), 12 deletions(-)
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_chmod.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_chown.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchmod.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchmodat.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchown.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchownat.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fremovexattr.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fsetxattr.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_lchown.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_lremovexattr.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_lsetxattr.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_removexattr.xml
>  create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_setxattr.xml
>  mode change 100755 => 100644 RHEL6/input/profiles/manual_audits.xml
>  mode change 100755 => 100644 RHEL6/input/profiles/manual_remediation.xml
> 

-


More information about the scap-security-guide mailing list