Suggestion on the 'Ensure All Files Are Owned...' items
Steve Grubb
sgrubb at redhat.com
Tue Jul 23 18:49:09 UTC 2013
On Tuesday, July 23, 2013 02:24:22 PM Maura Dailey wrote:
> That's about where I was going with it just now, actually (although I
> was unsuccessfully trying something more complicated with the
> password_test and password_object OVAL pieces), but do we have to solve
> network user ids as well? Or do you think it is sufficient in this check
> to just check local accounts?
I don't think this benchmark addressed network based user accounts. I'm not
even sure there is proper support in OVAL for that. If it did, it would
require a specific pam setup, or NIS+, or sssd. Because of the variations in
how to do it, I don't think there is a clear cut best way to do it. So, I'd
only concentrate on local users and leave network users out for now.
-Steve
More information about the scap-security-guide
mailing list