[PATCH 5/5] Updated selinux_all_devicefiles_labeled
Shawn Wells
shawn.d.wells at gmail.com
Sun Jun 9 16:06:46 UTC 2013
-------------- next part --------------
>From dcef37ad595694cc1dffc9a7a7ab5e677b6019a7 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 7 Jun 2013 12:21:50 -0400
Subject: [PATCH 5/5] Updated selinux_all_devicefiles_labeled
The check enumeration of 'none exist' was depricated for 'none satisfy' as of OVAL 5.3, reference:
http://oval.mitre.org/language/version5.10.1/ovaldefinition/documentation/oval-common-schema.html#CheckEnumeration
---
.../checks/selinux_all_devicefiles_labeled.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml b/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
index affef3d..fe9f343 100644
--- a/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
+++ b/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
@@ -11,7 +11,7 @@
<criterion comment="unlabeled_t in /dev" test_ref="test_selinux_all_devicefiles_labeled" />
</criteria>
</definition>
- <linux:selinuxsecuritycontext_test check="none exist" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
+ <linux:selinuxsecuritycontext_test check="none satisfy" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
<linux:object object_ref="object_selinux_all_devicefiles_labeled" />
<linux:state state_ref="state_selinux_all_devicefiles_labeled" />
</linux:selinuxsecuritycontext_test>
--
1.7.1
More information about the scap-security-guide
mailing list