[PATCH 0/3] Audit granularity and minor bugfixes
Jeffrey Blank
blank at eclipse.ncsc.mil
Thu Aug 23 18:13:53 UTC 2012
Excellent -- please push these!
(And pardon my slow response -- in the middle of a move.)
On 08/22/2012 02:30 AM, Kevin Spargur wrote:
> Increased the granularity of DAC mod auditing and some housekeeping.
>
> Kevin Spargur (3):
> Permissions cleanup on profiles
> Increased granularity for auditing of DAC modification
> Minor bugfix/typo
>
> .../checks/audit_rules_dac_modification_chmod.xml | 77 ++++
> .../checks/audit_rules_dac_modification_chown.xml | 77 ++++
> .../checks/audit_rules_dac_modification_fchmod.xml | 77 ++++
> .../audit_rules_dac_modification_fchmodat.xml | 77 ++++
> .../checks/audit_rules_dac_modification_fchown.xml | 77 ++++
> .../audit_rules_dac_modification_fchownat.xml | 77 ++++
> .../audit_rules_dac_modification_fremovexattr.xml | 77 ++++
> .../audit_rules_dac_modification_fsetxattr.xml | 77 ++++
> .../checks/audit_rules_dac_modification_lchown.xml | 77 ++++
> .../audit_rules_dac_modification_lremovexattr.xml | 77 ++++
> .../audit_rules_dac_modification_lsetxattr.xml | 77 ++++
> .../audit_rules_dac_modification_removexattr.xml | 77 ++++
> .../audit_rules_dac_modification_setxattr.xml | 77 ++++
> RHEL6/input/checks/postfix_logging.xml | 2 +-
> RHEL6/input/profiles/common.xml | 18 +-
> RHEL6/input/services/ftp.xml | 3 +-
> RHEL6/input/system/auditing.xml | 367 +++++++++++++++++++-
> 17 files changed, 1379 insertions(+), 12 deletions(-)
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_chmod.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_chown.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchmod.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchmodat.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchown.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fchownat.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fremovexattr.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_fsetxattr.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_lchown.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_lremovexattr.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_lsetxattr.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_removexattr.xml
> create mode 100644 RHEL6/input/checks/audit_rules_dac_modification_setxattr.xml
> mode change 100755 => 100644 RHEL6/input/profiles/manual_audits.xml
> mode change 100755 => 100644 RHEL6/input/profiles/manual_remediation.xml
>
-
More information about the scap-security-guide
mailing list