[PATCH] [Fedora] Add OVAL check for Verify that Shared Library Files Have Restrictive Permissions

Jan Lieskovsky jlieskov at redhat.com
Wed Dec 4 15:03:44 UTC 2013


This patch adds OVAL check for 'Verify that Shared Library Files Have Restrictive Permissions'
rule for Fedora.

It is a re-implementation / simplification against currently used RHEL-6 form:
  [1] https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/checks/file_permissions_library_dirs.xml

Instead of having dedicated tests for each of /lib, /lib64, /usr/lib && /usr/lib64
directories (and checking based on 'equals' operation), it uses just one test
for each of library permissions checks and files' permissions within those libraries
check (and checks based on 'pattern match' operation).

Passed basic sanity && regression testing.

Please review (especially in relation with existing RHEL-6 form if
we would like to use this proposal also for particular RHEL-6 OVAL check
in the future).

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Add-OVAL-check-for-Verify-that-Shared-Library.patch
Type: text/x-patch
Size: 4585 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131204/e55a7f20/attachment.bin>


More information about the scap-security-guide mailing list