[PATCH 2/2] new versions of unauth suid/sgid OVAL checks

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Jul 15 13:47:07 UTC 2013


Ah, I think that was from the new patch.

Ideally, we'd entirely remove the title and description from the OVAL
metadata, and insert it from the XCCDF automatically when needed during
the test/build process.  Ditto with the "id" attribute for the Rule;
this can always be derived from the filename in our build process.



On 07/15/2013 09:12 AM, Shawn Wells wrote:
> On 7/14/13 10:39 PM, Jeffrey Blank wrote:
>> diff --git a/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml b/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
>> index 5f10e5d..36d40d5 100644
>> --- a/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
>> +++ b/RHEL6/input/checks/file_permissions_unauthorized_sgid.xml
>> @@ -1,31 +1,73 @@
>>  <def-group>
>>    <definition class="compliance" id="file_permissions_unauthorized_sgid" version="1">
>>      <metadata>
>> -      <title>Find Unauthorized SGID System Executables</title>
>> +      <title>Find setgid files system packages</title>
> 
> Assuming you meant "Find setgid files _/from/_ system packages"
> 
> 
> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 


More information about the scap-security-guide mailing list