[PATCH 2/2] changed text to /etc/grub.conf
David Smith
dsmith at eclipse.ncsc.mil
Thu Oct 25 21:45:21 UTC 2012
Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
RHEL6/input/system/accounts/physical.xml | 32 +++++++++++++++---------------
1 files changed, 16 insertions(+), 16 deletions(-)
diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index 9f7d3ba..40ac529 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -23,13 +23,13 @@ are set properly.
</description>
<Rule id="user_owner_grub_conf" severity="medium">
-<title>Verify /boot/grub/grub.conf User Ownership</title>
-<description>The file <tt>/etc/grub.conf</tt> is a symbolic link to
-<tt>/boot/grub/grub.conf</tt> which should be owned by the <tt>root</tt> user
-to prevent destruction or modification of the file.
-<fileowner-desc-macro file="/boot/grub/grub.conf" owner="root"/>
+<title>Verify /etc/grub.conf User Ownership</title>
+<description>The file <tt>/etc/grub.conf</tt> should
+be owned by the <tt>root</tt> user to prevent destruction
+or modification of the file.
+<fileowner-desc-macro file="/etc/grub.conf" owner="root"/>
</description>
-<ocil><fileowner-check-macro file="/boot/grub/grub.conf" owner="root"/></ocil>
+<ocil><fileowner-check-macro file="/etc/grub.conf" owner="root"/></ocil>
<rationale>
Only root should be able to modify important boot parameters.
</rationale>
@@ -39,13 +39,13 @@ Only root should be able to modify important boot parameters.
</Rule>
<Rule id="group_owner_grub_conf" severity="medium">
-<title>Verify /boot/grub/grub.conf Group Ownership</title>
-<description>The file <tt>/etc/grub.conf</tt> is a symbolic link to
-<tt>/boot/grub/grub.conf</tt> which should be group-owned by the <tt>root</tt>
-group to prevent destruction or modification of the file.
-<filegroupowner-desc-macro file="/boot/grub/grub.conf" group="root"/>
+<title>Verify /etc/grub.conf Group Ownership</title>
+<description>The file <tt>/etc/grub.conf</tt> should
+be group-owned by the <tt>root</tt> group to prevent
+destruction or modification of the file.
+<filegroupowner-desc-macro file="/etc/grub.conf" group="root"/>
</description>
-<ocil><filegroupowner-check-macro file="/boot/grub/grub.conf" group="root"/></ocil>
+<ocil><filegroupowner-check-macro file="/etc/grub.conf" group="root"/></ocil>
<rationale>
The <tt>root</tt> group is a highly-privileged group. Furthermore, the group-owner of this
file should not have any access privileges anyway.
@@ -56,12 +56,12 @@ file should not have any access privileges anyway.
</Rule>
<Rule id="permissions_grub_conf" severity="medium">
-<title>Verify /boot/grub/grub.conf Permissions</title>
-<description>File permissions for <tt>/boot/grub/grub.conf</tt> should be set to 600, which
+<title>Verify /etc/grub.conf Permissions</title>
+<description>File permissions for <tt>/etc/grub.conf</tt> should be set to 600, which
is the default.
-<fileperms-desc-macro file="/boot/grub/grub.conf" perms="600"/>
+<fileperms-desc-macro file="/etc/grub.conf" perms="600"/>
</description>
-<ocil><fileperms-check-macro file="/boot/grub/grub.conf" perms="-rw-------"/></ocil>
+<ocil><fileperms-check-macro file="/etc/grub.conf" perms="-rw-------"/></ocil>
<rationale>
Proper permissions ensure that only the root user can modify important boot
parameters.
--
1.7.1
More information about the scap-security-guide
mailing list