[PATCH 0/2] updated setuid/setgid OVAL checks

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Jul 15 02:39:54 UTC 2013


This is a notification of push of (slightly modified) OVAL code
submitted by Rui, as described here:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-July/003540.html
Thanks Rui!

Ideally we would be able to "pass" any setuid/setgid program
that was installed as part of an RPM. Til then, this is a big 
improvement from the previous check (which could never pass).
Furthermore, this is easy for other users to tailor to their
environments.

It also gets "make validate" (OVAL schematron validation) closer to passing,
since it corrects the use of the deprecated check_existence="none_exist"
attribute in the unix:file_test.

Jeffrey Blank (2):
  Added line to indicate test output file, to OVAL testing script
  new versions of unauth suid/sgid OVAL checks

 .../checks/file_permissions_unauthorized_sgid.xml  |   60 ++++++++++++--
 .../checks/file_permissions_unauthorized_suid.xml  |   86 +++++++++++++++++--
 RHEL6/input/checks/testcheck.py                    |    1 +
 3 files changed, 129 insertions(+), 18 deletions(-)



More information about the scap-security-guide mailing list