[PATCH] [Fedora] OVAL checks for file_ownership_library_dirs, file_permissions_binary_dirs, and file_ownership_binary_dirs

Jan Lieskovsky jlieskov at redhat.com
Fri Dec 6 17:20:34 UTC 2013


This patch adds the following to Fedora (all three are rewritten /
simplified versions of existing RHEL-6 OVAL checks):
* OVAL check for Verify that Shared Library Files Have Root Ownership
* OVAL check for Verify that System Executables Have Restrictive Permissions
* OVAL check for Verify that System Executables Have Root Ownership

While all three from the provided OVAL checks could be placed into shared
directory, for now will keep them under Fedora input directory till
there's support for XSLT platform rewrite transformation in shared etc.

When their times come, they can be moved to shared together with
platforms attestations (past testing on RHEL-6 too).

Passed basic sanity testing on Fedora.

Please review (mainly if existing RHEL-6 ones could be
possibly replaced with these).

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Fedora-Add-OVAL-check-for-Verify-that-Shared-Library.patch
Type: text/x-patch
Size: 10584 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131206/a15491e9/attachment-0001.bin>


More information about the scap-security-guide mailing list