[PATCH 2/5] Removing unreferenced OVAL file_ssh_host_keys_public_permissions.xml

Shawn Wells shawn.d.wells at gmail.com
Sun Jun 9 16:06:23 UTC 2013


-------------- next part --------------
>From 0c9f1c7177f02275457c0a2bc50c5bdb64a4450f Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 7 Jun 2013 11:45:45 -0400
Subject: [PATCH 2/5] Removing unreferenced OVAL file_ssh_host_keys_public_permissions.xml

---
 .../file_ssh_host_keys_public_permissions.xml      |   45 --------------------
 1 files changed, 0 insertions(+), 45 deletions(-)
 delete mode 100644 RHEL6/input/checks/file_ssh_host_keys_public_permissions.xml

diff --git a/RHEL6/input/checks/file_ssh_host_keys_public_permissions.xml b/RHEL6/input/checks/file_ssh_host_keys_public_permissions.xml
deleted file mode 100644
index 46ccc3d..0000000
--- a/RHEL6/input/checks/file_ssh_host_keys_public_permissions.xml
+++ /dev/null
@@ -1,45 +0,0 @@
-<def-group>
-  <definition class="compliance" id="file_ssh_host_keys_public_permissions" version="1">
-    <metadata>
-      <title>Verify SSH Public Host Keys Permissions</title>
-      <affected family="unix">
-        <platform>Red Hat Enterprise Linux 6</platform>
-      </affected>
-      <description>Checks for correct permissions on SSH public host keys in the given SSH configuration directory.</description>
-    </metadata>
-    <criteria>
-      <criterion test_ref="test_ssh_public_host_keys" />
-    </criteria>
-  </definition>
-  <unix:file_test check="all" check_existence="all_exist" comment="ssh public host keys" id="test_ssh_public_host_keys" version="1">
-    <unix:object object_ref="object_ssh_public_host_keys" />
-    <unix:state state_ref="state_ssh_host_keys_public_uid_root" />
-    <unix:state state_ref="state_ssh_host_keys_public_gid_root" />
-    <unix:state state_ref="state_ssh_host_keys_public_mode_0644" />
-  </unix:file_test>
-  <unix:file_object comment="ssh public host keys" id="object_ssh_public_host_keys" version="1">
-    <unix:path var_ref="var_ssh_host_keys_public_config_directory" />
-    <unix:filename operation="pattern match">^.*_key\.pub$</unix:filename>
-  </unix:file_object>
-  <unix:file_state id="state_ssh_host_keys_public_uid_root" version="1">
-    <unix:user_id datatype="int" operation="equals">0</unix:user_id>
-  </unix:file_state>
-  <unix:file_state id="state_ssh_host_keys_public_gid_root" version="1">
-    <unix:group_id datatype="int" operation="equals">0</unix:group_id>
-  </unix:file_state>
-  <unix:file_state id="state_ssh_host_keys_public_mode_0644" version="1">
-    <unix:suid datatype="boolean">false</unix:suid>
-    <unix:sgid datatype="boolean">false</unix:sgid>
-    <unix:sticky datatype="boolean">false</unix:sticky>
-    <unix:uread datatype="boolean">true</unix:uread>
-    <unix:uwrite datatype="boolean">true</unix:uwrite>
-    <unix:uexec datatype="boolean">false</unix:uexec>
-    <unix:gread datatype="boolean">true</unix:gread>
-    <unix:gwrite datatype="boolean">false</unix:gwrite>
-    <unix:gexec datatype="boolean">false</unix:gexec>
-    <unix:oread datatype="boolean">true</unix:oread>
-    <unix:owrite datatype="boolean">false</unix:owrite>
-    <unix:oexec datatype="boolean">false</unix:oexec>
-  </unix:file_state>
-  <external_variable comment="ssh configuration directory" datatype="string" id="var_ssh_host_keys_public_config_directory" version="1" />
-</def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list