[PATCH 5/8] Updated selinux_all_devicefiles_labeled

Shawn Wells shawn.d.wells at gmail.com
Sun Jul 7 05:35:43 UTC 2013


-------------- next part --------------
>From 748ab302ab61cda9e59df5de5d9e0b03e0014ac1 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sun, 7 Jul 2013 01:27:53 -0400
Subject: [PATCH 5/8] Updated selinux_all_devicefiles_labeled
 The check enumeration of 'none exist' was depricated for 'none satisfy' as of OVAL 5.3, reference:
   http://oval.mitre.org/language/version5.10.1/ovaldefinition/documentation/oval-common-schema.html#CheckEnumeration

---
 .../checks/selinux_all_devicefiles_labeled.xml     |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml b/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
index affef3d..fe9f343 100644
--- a/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
+++ b/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
@@ -11,7 +11,7 @@
       <criterion comment="unlabeled_t in /dev" test_ref="test_selinux_all_devicefiles_labeled" />
     </criteria>
   </definition>
-  <linux:selinuxsecuritycontext_test check="none exist" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
+  <linux:selinuxsecuritycontext_test check="none satisfy" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
     <linux:object object_ref="object_selinux_all_devicefiles_labeled" />
     <linux:state state_ref="state_selinux_all_devicefiles_labeled" />
   </linux:selinuxsecuritycontext_test>
-- 
1.7.1



More information about the scap-security-guide mailing list