Suggestion on the 'Ensure All Files Are Owned...' items

Maura Dailey maura at eclipse.ncsc.mil
Tue Jul 23 18:04:48 UTC 2013


On 07/23/2013 01:23 PM, Gary Gapinski wrote:
> On 07/23/2013 01:17 PM, Maura Dailey wrote:
>> Does anyone actually have a way to "unown" or "ungroup own" a file for
>> testing purposes? I'd like to see if the uid shows up as 0 or as xsi:nil.
> chown <pick some unused uid> file
> chgrp <pick some unused gid> file

Huh, didn't realize that was all we were testing for. That makes it way 
harder to test in OVAL, obviously, since the normal file test will 
happily report whatever value it finds without checking if it's assigned 
to a user or group.

> Regards,
>
> Gary
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



More information about the scap-security-guide mailing list