[PATCH 1/5] Removing unreferenced file_ssh_host_keys_private_permissions.xml

Shawn Wells shawn.d.wells at gmail.com
Sun Jun 9 16:06:18 UTC 2013


-------------- next part --------------
>From 75f3f889a40fea2c838b6902bfea93b2512edd15 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 7 Jun 2013 11:39:39 -0400
Subject: [PATCH 1/5] Removing unreferenced file_ssh_host_keys_private_permissions.xml

---
 .../file_ssh_host_keys_private_permissions.xml     |   45 --------------------
 1 files changed, 0 insertions(+), 45 deletions(-)
 delete mode 100644 RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml

diff --git a/RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml b/RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml
deleted file mode 100644
index 9083c45..0000000
--- a/RHEL6/input/checks/file_ssh_host_keys_private_permissions.xml
+++ /dev/null
@@ -1,45 +0,0 @@
-<def-group>
-  <definition class="compliance" id="file_ssh_host_keys_private_permissions" version="1">
-    <metadata>
-      <title>Verify SSH Private Host Keys Permissions</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <description>Checks for correct permissions on SSH private host keys in the given SSH configuration directory.</description>
-    </metadata>
-    <criteria>
-      <criterion test_ref="test_ssh_private_host_keys" />
-    </criteria>
-  </definition>
-  <unix:file_test check="all" check_existence="all_exist" comment="ssh private host keys" id="test_ssh_private_host_keys" version="1">
-    <unix:object object_ref="object_ssh_private_host_keys" />
-    <unix:state state_ref="state_ssh_host_keys_private_uid_root" />
-    <unix:state state_ref="state_ssh_host_keys_private_gid_root" />
-    <unix:state state_ref="state_ssh_host_keys_private_mode_0600" />
-  </unix:file_test>
-  <unix:file_object comment="ssh private host keys" id="object_ssh_private_host_keys" version="1">
-    <unix:path var_ref="var_ssg_host_keys_private_config_directory" />
-    <unix:filename operation="pattern match">^.*_key$</unix:filename>
-  </unix:file_object>
-  <unix:file_state id="state_ssh_host_keys_private_uid_root" version="1">
-    <unix:user_id datatype="int" operation="equals">0</unix:user_id>
-  </unix:file_state>
-  <unix:file_state id="state_ssh_host_keys_private_gid_root" version="1">
-    <unix:group_id datatype="int" operation="equals">0</unix:group_id>
-  </unix:file_state>
-  <unix:file_state id="state_ssh_host_keys_private_mode_0600" version="1">
-    <unix:suid datatype="boolean">false</unix:suid>
-    <unix:sgid datatype="boolean">false</unix:sgid>
-    <unix:sticky datatype="boolean">false</unix:sticky>
-    <unix:uread datatype="boolean">true</unix:uread>
-    <unix:uwrite datatype="boolean">true</unix:uwrite>
-    <unix:uexec datatype="boolean">false</unix:uexec>
-    <unix:gread datatype="boolean">false</unix:gread>
-    <unix:gwrite datatype="boolean">false</unix:gwrite>
-    <unix:gexec datatype="boolean">false</unix:gexec>
-    <unix:oread datatype="boolean">false</unix:oread>
-    <unix:owrite datatype="boolean">false</unix:owrite>
-    <unix:oexec datatype="boolean">false</unix:oexec>
-  </unix:file_state>
-  <external_variable comment="ssh configuration directory" datatype="string" id="var_ssg_host_keys_private_config_directory" version="1" />
-</def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list