Suggestion on the 'Ensure All Files Are Owned...' items

Steve Grubb sgrubb at redhat.com
Tue Jul 23 18:49:09 UTC 2013


On Tuesday, July 23, 2013 02:24:22 PM Maura Dailey wrote:
> That's about where I was going with it just now, actually (although I
> was unsuccessfully trying something more complicated with the
> password_test and password_object OVAL pieces), but do we have to solve
> network user ids as well? Or do you think it is sufficient in this check
> to just check local accounts?

I don't think this benchmark addressed network based user accounts. I'm not 
even sure there is proper support in OVAL for that. If it did, it would 
require a specific pam setup, or NIS+, or sssd. Because of the variations in 
how to do it, I don't think there is a clear cut best way to do it. So, I'd 
only concentrate on local users and leave network users out for now.

-Steve



More information about the scap-security-guide mailing list