[PATCH] [Shared] Add initial shared OVAL check for 'Verify that Shared Library Files Have Restrictive Permissions' rule [was: [PATCH] [RFC] Creating shared bash script directory]

Jan Lieskovsky jlieskov at redhat.com
Thu Dec 5 18:53:22 UTC 2013


Based on thread:
  https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-December/thread.html#4585

this patch adds first OVAL check into scap-security-guide/shared/oval directory
and modifies main Makefile wrt to building Fedora packages it to include OVAL
checks directly provided in input/checks directory, together with those linked
from shared/ directory.

For now didn't change the value of <platform> element (didn't implement the
XSLT transformation it to be modified automatically based on underlying system
version content is build at) - will do this in next steps, once we have agreed
on the expected form of test_attestation element.

Passed basic sanity && regression testing on Fedora system.

RHEL-6 content has been intentionally kept intact till the moment, we are sure
about the final shared OVAL check form.

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Shared-Add-initial-shared-OVAL-check-for-Verify-that.patch
Type: text/x-patch
Size: 5824 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131205/ab844ffd/attachment-0001.bin>


More information about the scap-security-guide mailing list