[PATCH 1/5] Removing unreferenced file_ssh_host_keys_private_permissions.xml
Shawn Wells
shawn.d.wells at gmail.com
Sun Jun 9 16:06:18 UTC 2013
-------------- next part --------------
>From 75f3f889a40fea2c838b6902bfea93b2512edd15 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 7 Jun 2013 11:39:39 -0400
Subject: [PATCH 1/5] Removing unreferenced file_ssh_host_keys_private_permissions.xml
---
.../file_ssh_host_keys_private_permissions.xml | 45 --------------------
1 files changed, 0 insertions(+), 45 deletions(-)
delete mode 100644 RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml
diff --git a/RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml b/RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml
deleted file mode 100644
index 9083c45..0000000
--- a/RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml
+++ /dev/null
@@ -1,45 +0,0 @@
-<def-group>
- <definition class="compliance" id="file_ssh_host_keys_private_permissions" version="1">
- <metadata>
- <title>Verify SSH Private Host Keys Permissions</title>
- <affected family="unix">
- <platform>Red Hat Enterprise Linux 6</platform>
- </affected>
- <description>Checks for correct permissions on SSH private host keys in the given SSH configuration directory.</description>
- </metadata>
- <criteria>
- <criterion test_ref="test_ssh_private_host_keys" />
- </criteria>
- </definition>
- <unix:file_test check="all" check_existence="all_exist" comment="ssh private host keys" id="test_ssh_private_host_keys" version="1">
- <unix:object object_ref="object_ssh_private_host_keys" />
- <unix:state state_ref="state_ssh_host_keys_private_uid_root" />
- <unix:state state_ref="state_ssh_host_keys_private_gid_root" />
- <unix:state state_ref="state_ssh_host_keys_private_mode_0600" />
- </unix:file_test>
- <unix:file_object comment="ssh private host keys" id="object_ssh_private_host_keys" version="1">
- <unix:path var_ref="var_ssg_host_keys_private_config_directory" />
- <unix:filename operation="pattern match">^.*_key$</unix:filename>
- </unix:file_object>
- <unix:file_state id="state_ssh_host_keys_private_uid_root" version="1">
- <unix:user_id datatype="int" operation="equals">0</unix:user_id>
- </unix:file_state>
- <unix:file_state id="state_ssh_host_keys_private_gid_root" version="1">
- <unix:group_id datatype="int" operation="equals">0</unix:group_id>
- </unix:file_state>
- <unix:file_state id="state_ssh_host_keys_private_mode_0600" version="1">
- <unix:suid datatype="boolean">false</unix:suid>
- <unix:sgid datatype="boolean">false</unix:sgid>
- <unix:sticky datatype="boolean">false</unix:sticky>
- <unix:uread datatype="boolean">true</unix:uread>
- <unix:uwrite datatype="boolean">true</unix:uwrite>
- <unix:uexec datatype="boolean">false</unix:uexec>
- <unix:gread datatype="boolean">false</unix:gread>
- <unix:gwrite datatype="boolean">false</unix:gwrite>
- <unix:gexec datatype="boolean">false</unix:gexec>
- <unix:oread datatype="boolean">false</unix:oread>
- <unix:owrite datatype="boolean">false</unix:owrite>
- <unix:oexec datatype="boolean">false</unix:oexec>
- </unix:file_state>
- <external_variable comment="ssh configuration directory" datatype="string" id="var_ssg_host_keys_private_config_directory" version="1" />
-</def-group>
--
1.7.1
More information about the scap-security-guide
mailing list