Suggestion on the 'Ensure All Files Are Owned...' items

Andrew Gilmore agilmore2 at gmail.com
Tue Jul 23 17:53:43 UTC 2013


Hmm, these tests should be simply a permutation of find / -type f -nouser
or -nogroup.

It appeared to me that the standard WAS specifying only files, and not
directories.

If you want to be sure you're not scanning network shares, I suppose some
iteration through local partitions, either as returned by mount(1) or some
other magic would be necessary, but the find command is generally the same.
I like the
-ignore_readdir_race fix, too.

Andrew


On Tue, Jul 23, 2013 at 11:23 AM, Gary Gapinski <gapinski at nasa.gov> wrote:

> On 07/23/2013 01:17 PM, Maura Dailey wrote:
> > Does anyone actually have a way to "unown" or "ungroup own" a file for
> > testing purposes? I'd like to see if the uid shows up as 0 or as xsi:nil.
>
> chown <pick some unused uid> file
> chgrp <pick some unused gid> file
>
> Regards,
>
> Gary
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130723/e82cdecc/attachment-0001.html>


More information about the scap-security-guide mailing list