[PATCH 0/3] More tidying for make validate

Maura Dailey maura at eclipse.ncsc.mil
Thu May 30 20:43:55 UTC 2013


There are a few more coming that need more testing or aren't working correctly, but here's a small batch for now.

The behavior recurse="files" was deprecated, so I changed it to the normal "symlinks and directories". Also, the
environment variable tests were updated and replaced by the environmentvariable58 tests, objects, and states.

One check I can't submit an update to yet that has a similar problem is "accounts_root_path_dirs_no_write". I was
cleaning it up and replacing the deprecated check when I noticed that the check is not actually working correctly.
Specifying a single path in file_object gets the correct result of true or false, but passing in a variable with
multiple values (PATH, split into multiple strings) appears to always fail with "does not exist".

- Maura Dailey

Maura Dailey (3):
  Replacing deprecated <ind:environmentvariable_...> tags with
    <ind:environmentvariable58_...> tags
  Removing deprecated recurse=files behavior.
  Removing deprecated recurse="files" behavior

 .../checks/accounts_dangerous_path_for_root.xml    |   53 ++++++++++----------
 .../input/checks/file_permissions_ungroupowned.xml |    4 +-
 RHEL6/input/checks/file_permissions_unowned.xml    |    4 +-
 3 files changed, 31 insertions(+), 30 deletions(-)



More information about the scap-security-guide mailing list