Suggestion on the 'Ensure All Files Are Owned...' items
Maura Dailey
maura at eclipse.ncsc.mil
Tue Jul 23 18:04:48 UTC 2013
On 07/23/2013 01:23 PM, Gary Gapinski wrote:
> On 07/23/2013 01:17 PM, Maura Dailey wrote:
>> Does anyone actually have a way to "unown" or "ungroup own" a file for
>> testing purposes? I'd like to see if the uid shows up as 0 or as xsi:nil.
> chown <pick some unused uid> file
> chgrp <pick some unused gid> file
Huh, didn't realize that was all we were testing for. That makes it way
harder to test in OVAL, obviously, since the normal file test will
happily report whatever value it finds without checking if it's assigned
to a user or group.
> Regards,
>
> Gary
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
More information about the scap-security-guide
mailing list