[PATCH 2/7] removed files which are either obsolete or are/will be created through different mechanisms
Jeffrey Blank
blank at eclipse.ncsc.mil
Tue Sep 4 23:16:32 UTC 2012
Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
.../input/checks/file_permissions_etc_at_allow.xml | 37 -------
RHEL6/input/checks/package_pam_ccreds_removed.xml | 27 -----
RHEL6/input/checks/service_ntpdate_enabled.xml | 103 --------------------
3 files changed, 0 insertions(+), 167 deletions(-)
delete mode 100644 RHEL6/input/checks/file_permissions_etc_at_allow.xml
delete mode 100644 RHEL6/input/checks/package_pam_ccreds_removed.xml
delete mode 100644 RHEL6/input/checks/service_ntpdate_enabled.xml
diff --git a/RHEL6/input/checks/file_permissions_etc_at_allow.xml b/RHEL6/input/checks/file_permissions_etc_at_allow.xml
deleted file mode 100644
index 9078dd2..0000000
--- a/RHEL6/input/checks/file_permissions_etc_at_allow.xml
+++ /dev/null
@@ -1,37 +0,0 @@
-<def-group>
- <definition class="compliance" id="file_permissions_etc_at_allow" version="1">
- <metadata>
- <title>Verify /etc/at.allow Permissions</title>
- <affected family="unix">
- <platform>Red Hat Enterprise Linux 6</platform>
- </affected>
- <reference ref_id="TODO" source="CCE" />
- <description>Checks for correct permissions on the /etc/at.allow file.</description>
- </metadata>
- <criteria>
- <criterion test_ref="test_file_permissions_etc_at_allow" />
- </criteria>
- </definition>
- <unix:file_test check="all" check_existence="at_least_one_exists" comment="/etc/at.allow file mode 0600" id="test_file_permissions_etc_at_allow" version="1">
- <unix:object object_ref="object_file_permissions_etc_at_allow" />
- <unix:state state_ref="state_mode_0600" />
- </unix:file_test>
- <unix:file_object comment="/etc/at.allow" id="object_file_permissions_etc_at_allow" version="1">
- <unix:path>/etc</unix:path>
- <unix:filename>at.allow</unix:filename>
- </unix:file_object>
- <unix:file_state id="state_mode_0600" version="1" operator="AND">
- <unix:suid datatype="boolean">false</unix:suid>
- <unix:sgid datatype="boolean">false</unix:sgid>
- <unix:sticky datatype="boolean">false</unix:sticky>
- <unix:uread datatype="boolean">true</unix:uread>
- <unix:uwrite datatype="boolean">true</unix:uwrite>
- <unix:uexec datatype="boolean">false</unix:uexec>
- <unix:gread datatype="boolean">false</unix:gread>
- <unix:gwrite datatype="boolean">false</unix:gwrite>
- <unix:gexec datatype="boolean">false</unix:gexec>
- <unix:oread datatype="boolean">false</unix:oread>
- <unix:owrite datatype="boolean">false</unix:owrite>
- <unix:oexec datatype="boolean">false</unix:oexec>
- </unix:file_state>
-</def-group>
diff --git a/RHEL6/input/checks/package_pam_ccreds_removed.xml b/RHEL6/input/checks/package_pam_ccreds_removed.xml
deleted file mode 100644
index 3288cbf..0000000
--- a/RHEL6/input/checks/package_pam_ccreds_removed.xml
+++ /dev/null
@@ -1,27 +0,0 @@
-<def-group>
- <definition class="compliance" id="package_pam_ccreds_removed"
- version="1">
- <metadata>
- <title>Package pam_ccreds is removed</title>
- <affected family="unix">
- <platform>Red Hat Enterprise Linux 6</platform>
- </affected>
- <reference ref_id="17250-2 " source="CCE" />
- <description>The package pam_ccreds should be removed. This
- check was generated by the 'create_package_checks.py' script
- in the templates directory.</description>
- </metadata>
- <criteria>
- <criterion comment="package pam_ccreds is removed"
- test_ref="test_package_pam_ccreds_removed" />
- </criteria>
- </definition>
- <linux:rpminfo_test check="all" check_existence="none_exist"
- id="test_package_pam_ccreds_removed" version="1"
- comment="package pam_ccreds is removed">
- <linux:object object_ref="obj_package_pam_ccreds" />
- </linux:rpminfo_test>
- <linux:rpminfo_object id="obj_package_pam_ccreds" version="1">
- <linux:name>pam_ccreds</linux:name>
- </linux:rpminfo_object>
-</def-group>
diff --git a/RHEL6/input/checks/service_ntpdate_enabled.xml b/RHEL6/input/checks/service_ntpdate_enabled.xml
deleted file mode 100644
index dfc0d4e..0000000
--- a/RHEL6/input/checks/service_ntpdate_enabled.xml
+++ /dev/null
@@ -1,103 +0,0 @@
-<def-group>
- <definition class="compliance" id="service_ntpdate_enabled"
- version="1">
- <metadata>
- <title>Service ntpdate Enabled</title>
- <affected family="unix">
- <platform>Red Hat Enterprise Linux 6</platform>
- </affected>
- <reference ref_id="TODO" source="CCE" />
- <description>The ntpdate service should be enabled if
- possible. This check was generated with the
- create_services_enabled.py script in the templates
- directory.</description>
- </metadata>
- <criteria comment="package ntp installed and service ntpdate is configured to start" operator="AND">
- <extend_definition comment="ntp installed" definition_ref="package_ntp_installed" />
- <criteria operator="OR" comment="service ntpdate is configured to start">
- <criterion comment="ntpdate runlevel 0" test_ref="test_runlevel0_ntpdate" />
- <criterion comment="ntpdate runlevel 1" test_ref="test_runlevel1_ntpdate" />
- <criterion comment="ntpdate runlevel 2" test_ref="test_runlevel2_ntpdate" />
- <criterion comment="ntpdate runlevel 3" test_ref="test_runlevel3_ntpdate" />
- <criterion comment="ntpdate runlevel 4" test_ref="test_runlevel4_ntpdate" />
- <criterion comment="ntpdate runlevel 5" test_ref="test_runlevel5_ntpdate" />
- <criterion comment="ntpdate runlevel 6" test_ref="test_runlevel6_ntpdate" />
- </criteria>
- </criteria>
- </definition>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel0_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel0_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel1_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel1_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel2_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel2_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel3_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel3_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel4_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel4_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel5_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel5_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_test check="all" check_existence="any_exist"
- comment="Runlevel test" id="test_runlevel6_ntpdate"
- version="2">
- <unix:object object_ref="obj_runlevel6_ntpdate" />
- <unix:state state_ref="state_service_on" />
- </unix:runlevel_test>
- <unix:runlevel_object id="obj_runlevel0_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">0</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_object id="obj_runlevel1_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">1</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_object id="obj_runlevel2_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">2</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_object id="obj_runlevel3_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">3</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_object id="obj_runlevel4_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">4</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_object id="obj_runlevel5_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">5</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_object id="obj_runlevel6_ntpdate" version="1">
- <unix:service_name>ntpdate</unix:service_name>
- <unix:runlevel operation="equals">6</unix:runlevel>
- </unix:runlevel_object>
- <unix:runlevel_state comment="daemon is configured to start"
- id="state_service_on" version="1">
- <unix:start datatype="boolean">true</unix:start>
- <unix:kill datatype="boolean">false</unix:kill>
- </unix:runlevel_state>
-</def-group>
--
1.7.1
More information about the scap-security-guide
mailing list