[PATCH 3/3] Renaming oval check no_rsh_trusted_host_files to no_rsh_trust_files to match rule ID

Jeffrey Blank blank at eclipse.ncsc.mil
Wed May 22 19:56:57 UTC 2013


it compiles, ship it


On 05/21/2013 01:36 PM, Maura Dailey wrote:
> 
> Signed-off-by: Maura Dailey <maura at eclipse.ncsc.mil>
> ---
>  RHEL6/input/checks/no_rsh_trust_files.xml |   26 +++++++++++++-------------
>  RHEL6/input/services/obsolete.xml         |    2 +-
>  2 files changed, 14 insertions(+), 14 deletions(-)
> 
> diff --git a/RHEL6/input/checks/no_rsh_trust_files.xml b/RHEL6/input/checks/no_rsh_trust_files.xml
> index 1e05dd1..22c1c82 100644
> --- a/RHEL6/input/checks/no_rsh_trust_files.xml
> +++ b/RHEL6/input/checks/no_rsh_trust_files.xml
> @@ -1,5 +1,5 @@
>  <def-group>
> -  <definition class="compliance" id="no_rsh_trusted_host_files" version="1">
> +  <definition class="compliance" id="no_rsh_trust_files" version="1">
>      <metadata>
>        <title>No Legacy .rhosts Or hosts.equiv Files</title>
>        <affected family="unix">
> @@ -8,30 +8,30 @@
>        <description>There should not be any .rhosts or hosts.equiv files on the system.</description>
>      </metadata>
>      <criteria operator="AND">
> -      <criterion test_ref="test_no_rsh_trusted_host_files_root" negate="true" />
> -      <criterion test_ref="test_no_rsh_trusted_host_files_home" negate="true" />
> -      <criterion test_ref="test_no_rsh_trusted_host_files_etc" negate="true" />
> +      <criterion test_ref="test_no_rsh_trust_files_root" negate="true" />
> +      <criterion test_ref="test_no_rsh_trust_files_home" negate="true" />
> +      <criterion test_ref="test_no_rsh_trust_files_etc" negate="true" />
>      </criteria>
>    </definition>
> -  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for .rhosts or .shosts in /root" id="test_no_rsh_trusted_host_files_root" version="1">
> -    <unix:object object_ref="object_no_rsh_trusted_host_files_root" />
> +  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for .rhosts or .shosts in /root" id="test_no_rsh_trust_files_root" version="1">
> +    <unix:object object_ref="object_no_rsh_trust_files_root" />
>    </unix:file_test>
> -  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for .rhosts or .shosts in /home" id="test_no_rsh_trusted_host_files_home" version="1">
> -    <unix:object object_ref="object_no_rsh_trusted_host_files_home" />
> +  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for .rhosts or .shosts in /home" id="test_no_rsh_trust_files_home" version="1">
> +    <unix:object object_ref="object_no_rsh_trust_files_home" />
>    </unix:file_test>
> -  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for /etc/hosts.equiv or /etc/shosts.equiv" id="test_no_rsh_trusted_host_files_etc" version="1">
> -    <unix:object object_ref="object_no_rsh_trusted_host_files_etc" />
> +  <unix:file_test check="all" check_existence="at_least_one_exists" comment="look for /etc/hosts.equiv or /etc/shosts.equiv" id="test_no_rsh_trust_files_etc" version="1">
> +    <unix:object object_ref="object_no_rsh_trust_files_etc" />
>    </unix:file_test>
> -  <unix:file_object comment="look for .rhosts or .shosts in /root" id="object_no_rsh_trusted_host_files_root" version="1">
> +  <unix:file_object comment="look for .rhosts or .shosts in /root" id="object_no_rsh_trust_files_root" version="1">
>      <unix:path operation="equals">/root</unix:path>
>      <unix:filename operation="pattern match">^\.(r|s)hosts$</unix:filename>
>    </unix:file_object>
> -  <unix:file_object comment="look for .rhosts or .shosts in /home" id="object_no_rsh_trusted_host_files_home" version="1">
> +  <unix:file_object comment="look for .rhosts or .shosts in /home" id="object_no_rsh_trust_files_home" version="1">
>      <unix:behaviors recurse="directories" recurse_direction="down" max_depth="1" recurse_file_system="all" />
>      <unix:path operation="equals">/home</unix:path>
>      <unix:filename operation="pattern match">^\.(r|s)hosts$</unix:filename>
>    </unix:file_object>
> -  <unix:file_object comment="look for /etc/hosts.equiv or /etc/shosts.equiv" id="object_no_rsh_trusted_host_files_etc" version="1">
> +  <unix:file_object comment="look for /etc/hosts.equiv or /etc/shosts.equiv" id="object_no_rsh_trust_files_etc" version="1">
>      <unix:path operation="equals">/etc</unix:path>
>      <unix:filename operation="pattern match">^s?hosts.equiv$</unix:filename>
>    </unix:file_object>
> diff --git a/RHEL6/input/services/obsolete.xml b/RHEL6/input/services/obsolete.xml
> index 0c28d24..8883caf 100644
> --- a/RHEL6/input/services/obsolete.xml
> +++ b/RHEL6/input/services/obsolete.xml
> @@ -209,7 +209,7 @@ used in conjunction with the R-services, they can allow
>  unauthenticated access to a system.</rationale>
>  <ident cce="27270-8" />
>  <ref nist="AC-17(8),CM-7" disa="1436" />
> -<oval id="no_rsh_trusted_host_files" />
> +<oval id="no_rsh_trust_files" />
>  <tested by="DS" on="20121026"/>
>  </Rule>
>  
> 


More information about the scap-security-guide mailing list