[PATCH] [bugfix] Ticket 169 - False positive - postfix_logging

Shawn Wells shawn.d.wells at gmail.com
Sat Apr 20 03:59:36 UTC 2013


-------------- next part --------------
>From a3d19e597ed36fa431fd383d05933662bfd461dc Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 19 Apr 2013 23:58:27 -0400
Subject: [PATCH] [bugfix] Ticket 169 - False positive - postfix_logging
 Test should first check if Postfix is installed and running

---
 RHEL6/input/checks/postfix_logging.xml |   18 +++++++++++-------
 1 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/RHEL6/input/checks/postfix_logging.xml b/RHEL6/input/checks/postfix_logging.xml
index 9ea2b3b..d0e498f 100644
--- a/RHEL6/input/checks/postfix_logging.xml
+++ b/RHEL6/input/checks/postfix_logging.xml
@@ -8,15 +8,19 @@
       </affected>
       <description>Postfix Should Log Relevant Events and Logs Shall Be Protected.</description>
     </metadata>
-    <criteria operator="AND">
-      <criterion comment="Test log file ownership"       test_ref="test_postfix_logging_ownership" />
-      <criterion comment="Test log file group ownership" test_ref="test_postfix_logging_gownership" />
-      <criterion comment="Test log file permissions"     test_ref="test_postfix_logging_permissions" />
-      <criterion comment="Test logs set for maillog"     test_ref="test_postfix_logging_sent_to_maillog" />
-      <criterion comment="Test logs are set to rotate"   test_ref="test_postfix_logging_maillog_rotates" />
+    <criteria comment="Postfix installed and service is configured to start" operator="AND">
+      <!-- NOTE: The package install check is inherited from service_postfix_enabled -->
+      <extend_definition comment="postfix configured to start" definition_ref="service_postfix_enabled" />
+      <criteria operator="AND">
+        <criterion comment="Test log file ownership"       test_ref="test_postfix_logging_ownership" />
+        <criterion comment="Test log file group ownership" test_ref="test_postfix_logging_gownership" />
+        <criterion comment="Test log file permissions"     test_ref="test_postfix_logging_permissions" />
+        <criterion comment="Test logs set for maillog"     test_ref="test_postfix_logging_sent_to_maillog" />
+        <criterion comment="Test logs are set to rotate"   test_ref="test_postfix_logging_maillog_rotates" />
+      </criteria>
     </criteria>
   </definition>
- 
+
   <unix:file_test check="all" check_existence="all_exist"
   comment="Testing ownership of maillog file"
   id="test_postfix_logging_ownership" version="1">
-- 
1.7.1



More information about the scap-security-guide mailing list