[PATCH 1/2] Adding ability to check for absolute file paths for X, as seen in some other published security guidance

Jeffrey Blank blank at eclipse.ncsc.mil
Mon May 13 23:42:59 UTC 2013


NACK.  This check is not references by the XCCDF.  The right course of
action is instead to delete this check.

Please run "make validate" if you are looking for OVAL that should probably
be deleted.


On Mon, May 13, 2013 at 2:20 PM, Maura Dailey <maura at eclipse.ncsc.mil>wrote:

>
> Signed-off-by: Maura Dailey <maura at eclipse.ncsc.mil>
> ---
>  RHEL6/input/checks/xwindows_remote_listening.xml |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL6/input/checks/xwindows_remote_listening.xml
> b/RHEL6/input/checks/xwindows_remote_listening.xml
> index 0d5e5c9..cb4ef3d 100644
> --- a/RHEL6/input/checks/xwindows_remote_listening.xml
> +++ b/RHEL6/input/checks/xwindows_remote_listening.xml
> @@ -24,7 +24,7 @@
>    version="1">
>      <ind:path>/etc/X11/xinit</ind:path>
>      <ind:filename>xserverrc</ind:filename>
> -    <ind:pattern operation="pattern
> match">^[\s]*exec\sX\s:0\s\-nolisten\stcp\s\$@</ind:pattern>
> +    <ind:pattern operation="pattern match">^\s*exec\s*[
> /\\\.\w]*X\s*:0\s*\-nolisten\s*tcp\s*["]?\$@["]?$</ind:pattern>
>      <ind:instance datatype="int">1</ind:instance>
>    </ind:textfilecontent54_object>
>  </def-group>
> --
> 1.7.1
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130513/6770cdf2/attachment-0001.html>


More information about the scap-security-guide mailing list