[PATCH 1/2] Adding ability to check for absolute file paths for X, as seen in some other published security guidance

Maura Dailey maura at eclipse.ncsc.mil
Mon May 13 18:20:07 UTC 2013


Signed-off-by: Maura Dailey <maura at eclipse.ncsc.mil>
---
 RHEL6/input/checks/xwindows_remote_listening.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/checks/xwindows_remote_listening.xml b/RHEL6/input/checks/xwindows_remote_listening.xml
index 0d5e5c9..cb4ef3d 100644
--- a/RHEL6/input/checks/xwindows_remote_listening.xml
+++ b/RHEL6/input/checks/xwindows_remote_listening.xml
@@ -24,7 +24,7 @@
   version="1">
     <ind:path>/etc/X11/xinit</ind:path>
     <ind:filename>xserverrc</ind:filename>
-    <ind:pattern operation="pattern match">^[\s]*exec\sX\s:0\s\-nolisten\stcp\s\$@</ind:pattern>
+    <ind:pattern operation="pattern match">^\s*exec\s*[ /\\\.\w]*X\s*:0\s*\-nolisten\s*tcp\s*["]?\$@["]?$</ind:pattern>
     <ind:instance datatype="int">1</ind:instance>
   </ind:textfilecontent54_object>
 </def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list