[PATCH 5/5] Updated selinux_all_devicefiles_labeled

Shawn Wells shawn.d.wells at gmail.com
Sun Jun 9 16:06:46 UTC 2013


-------------- next part --------------
>From dcef37ad595694cc1dffc9a7a7ab5e677b6019a7 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Fri, 7 Jun 2013 12:21:50 -0400
Subject: [PATCH 5/5] Updated selinux_all_devicefiles_labeled
 The check enumeration of 'none exist' was depricated for 'none satisfy' as of OVAL 5.3, reference:
 http://oval.mitre.org/language/version5.10.1/ovaldefinition/documentation/oval-common-schema.html#CheckEnumeration

---
 .../checks/selinux_all_devicefiles_labeled.xml     |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml b/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
index affef3d..fe9f343 100644
--- a/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
+++ b/RHEL6/input/checks/selinux_all_devicefiles_labeled.xml
@@ -11,7 +11,7 @@
       <criterion comment="unlabeled_t in /dev" test_ref="test_selinux_all_devicefiles_labeled" />
     </criteria>
   </definition>
-  <linux:selinuxsecuritycontext_test check="none exist" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
+  <linux:selinuxsecuritycontext_test check="none satisfy" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
     <linux:object object_ref="object_selinux_all_devicefiles_labeled" />
     <linux:state state_ref="state_selinux_all_devicefiles_labeled" />
   </linux:selinuxsecuritycontext_test>
-- 
1.7.1



More information about the scap-security-guide mailing list