[PATCH 08/14] Created OCIL for world_writable_files_system_ownership Modified description text, which already had manual check information, to create OCIL content

Shawn Wells shawn at redhat.com
Wed Sep 19 16:11:46 UTC 2012


---
 RHEL6/input/system/permissions/files.xml |    9 +++++----
 1 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/system/permissions/files.xml b/RHEL6/input/system/permissions/files.xml
index b82c024..afe6671 100644
--- a/RHEL6/input/system/permissions/files.xml
+++ b/RHEL6/input/system/permissions/files.xml
@@ -370,13 +370,14 @@ and the cause should be discovered and addressed.
 <title>Ensure All World-Writable Directories Are Owned by a System Account</title>
 <description>Locate any directories in local partitions which are
 world-writable and ensure that they are owned by root or another
-system account. The following command will discover and print these
+system account.</description>
+<ocil> The following command will discover and print these
 (assuming only system accounts have a uid lower than 500). Run it
-once for each local partition PART:
-<pre># find PART -xdev -type d -perm -0002 -uid +500 -print</pre>
+once for each local partition <i>PART</i>:
+<pre># find <i>PART</i> -xdev -type d -perm -0002 -uid +500 -print</pre>
 If this command produces any output, investigate why the
 current owner is not root or another system account.
-</description>
+</ocil>
 <rationale>
 Allowing a user account to own a world-writeable directory is
 undesirable because it allows the owner of that directory to remove
-- 
1.7.1


--VbJkn9YxBvnuCH5J--


More information about the scap-security-guide mailing list