[PATCH 2/2] added library directories to check text

David Smith dsmith at eclipse.ncsc.mil
Wed Mar 13 12:46:40 UTC 2013


Signed-off-by: David Smith <dsmith at eclipse.ncsc.mil>
---
 RHEL6/input/system/permissions/files.xml |   10 ++++++++--
 1 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/permissions/files.xml b/RHEL6/input/system/permissions/files.xml
index 603a05d..9a0de83 100644
--- a/RHEL6/input/system/permissions/files.xml
+++ b/RHEL6/input/system/permissions/files.xml
@@ -230,8 +230,14 @@ following command:
 <pre># chown root <i>FILE</i></pre>
 </description>
 <ocil clause="any of these files are not owned by root">
-To find shared libraries that are not owned by <tt>root</tt>,
-run the following command for each directory <i>DIR</i> which contains shared libraries:
+Shared libraries are stored in the following directories:
+<pre>/lib
+/lib64
+/usr/lib
+/usr/lib64
+</pre>
+For each of these directories, run the following command to find files not 
+owned by root:
 <pre>$ find <i>DIR</i> \! -user root</pre>
 </ocil>
 <rationale>Files from shared library directories are loaded into the address
-- 
1.7.1



More information about the scap-security-guide mailing list