[PATCH] additional OVAL testing

Shawn Wells shawn at redhat.com
Fri Oct 11 14:31:24 UTC 2013


On 10/11/13 10:19 AM, David Smith wrote:
> From: David Smith  <dsmith at eclipse.ncsc.mil>
>
> ---
>   .../accounts_password_pam_cracklib_dcredit.xml     |    1 +
>   .../accounts_password_pam_cracklib_difok.xml       |    1 +
>   .../accounts_password_pam_cracklib_lcredit.xml     |    1 +
>   .../accounts_password_pam_cracklib_ocredit.xml     |    1 +
>   .../accounts_password_pam_cracklib_ucredit.xml     |    1 +
>   .../checks/audit_rules_file_deletion_events.xml    |    1 +
>   RHEL6/input/checks/audit_rules_media_export.xml    |    1 +
>   .../input/checks/audit_rules_sysadmin_actions.xml  |    1 +
>   RHEL6/input/checks/audit_rules_time_adjtimex.xml   |    1 +
>   .../audit_rules_unsuccessful_file_modification.xml |    1 +
>   10 files changed, 10 insertions(+), 0 deletions(-)
>
> diff --git a/RHEL6/input/checks/accounts_password_pam_cracklib_dcredit.xml b/RHEL6/input/checks/accounts_password_pam_cracklib_dcredit.xml
> index 182313a..b0e13f4 100644
> --- a/RHEL6/input/checks/accounts_password_pam_cracklib_dcredit.xml
> +++ b/RHEL6/input/checks/accounts_password_pam_cracklib_dcredit.xml
> @@ -7,6 +7,7 @@
>         </affected>
>         <description>The password dcredit should meet minimum
>         requirements using pam_cracklib</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="Conditions for dcredit are satisfied"
> diff --git a/RHEL6/input/checks/accounts_password_pam_cracklib_difok.xml b/RHEL6/input/checks/accounts_password_pam_cracklib_difok.xml
> index 37945cd..2aad2de 100644
> --- a/RHEL6/input/checks/accounts_password_pam_cracklib_difok.xml
> +++ b/RHEL6/input/checks/accounts_password_pam_cracklib_difok.xml
> @@ -7,6 +7,7 @@
>         </affected>
>         <description>The password difok should meet minimum
>         requirements using pam_cracklib</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="Conditions for difok are satisfied"
> diff --git a/RHEL6/input/checks/accounts_password_pam_cracklib_lcredit.xml b/RHEL6/input/checks/accounts_password_pam_cracklib_lcredit.xml
> index f9c42f0..a4f35f0 100644
> --- a/RHEL6/input/checks/accounts_password_pam_cracklib_lcredit.xml
> +++ b/RHEL6/input/checks/accounts_password_pam_cracklib_lcredit.xml
> @@ -7,6 +7,7 @@
>         </affected>
>         <description>The password lcredit should meet minimum
>         requirements using pam_cracklib</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="Conditions for lcredit are satisfied"
> diff --git a/RHEL6/input/checks/accounts_password_pam_cracklib_ocredit.xml b/RHEL6/input/checks/accounts_password_pam_cracklib_ocredit.xml
> index 8d433f4..39d106f 100644
> --- a/RHEL6/input/checks/accounts_password_pam_cracklib_ocredit.xml
> +++ b/RHEL6/input/checks/accounts_password_pam_cracklib_ocredit.xml
> @@ -7,6 +7,7 @@
>         </affected>
>         <description>The password ocredit should meet minimum
>         requirements using pam_cracklib</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="Conditions for ocredit are satisfied"
> diff --git a/RHEL6/input/checks/accounts_password_pam_cracklib_ucredit.xml b/RHEL6/input/checks/accounts_password_pam_cracklib_ucredit.xml
> index 9227167..0e2c478 100644
> --- a/RHEL6/input/checks/accounts_password_pam_cracklib_ucredit.xml
> +++ b/RHEL6/input/checks/accounts_password_pam_cracklib_ucredit.xml
> @@ -7,6 +7,7 @@
>         </affected>
>         <description>The password ucredit should meet minimum
>         requirements using pam_cracklib</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="Conditions for ucredit are satisfied"
> diff --git a/RHEL6/input/checks/audit_rules_file_deletion_events.xml b/RHEL6/input/checks/audit_rules_file_deletion_events.xml
> index 9995642..d93d4d2 100644
> --- a/RHEL6/input/checks/audit_rules_file_deletion_events.xml
> +++ b/RHEL6/input/checks/audit_rules_file_deletion_events.xml
> @@ -6,6 +6,7 @@
>           <platform>Red Hat Enterprise Linux 6</platform>
>         </affected>
>         <description>Audit files deletion events.</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="audit file delete" test_ref="test_audit_rules_file_deletion_events" />
> diff --git a/RHEL6/input/checks/audit_rules_media_export.xml b/RHEL6/input/checks/audit_rules_media_export.xml
> index 7019700..5adbfd2 100644
> --- a/RHEL6/input/checks/audit_rules_media_export.xml
> +++ b/RHEL6/input/checks/audit_rules_media_export.xml
> @@ -6,6 +6,7 @@
>           <platform>Red Hat Enterprise Linux 6</platform>
>         </affected>
>         <description>Audit rules that detect the mounting of filesystems should be enabled.</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="audit mount" test_ref="test_audit_rules_media_export" />
> diff --git a/RHEL6/input/checks/audit_rules_sysadmin_actions.xml b/RHEL6/input/checks/audit_rules_sysadmin_actions.xml
> index 485f12e..081eedf 100644
> --- a/RHEL6/input/checks/audit_rules_sysadmin_actions.xml
> +++ b/RHEL6/input/checks/audit_rules_sysadmin_actions.xml
> @@ -6,6 +6,7 @@
>           <platform>Red Hat Enterprise Linux 6</platform>
>         </affected>
>         <description>Audit actions taken by system administrators on the system.</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria>
>         <criterion comment="audit sudoers" test_ref="test_audit_rules_sysadmin_actions" />
> diff --git a/RHEL6/input/checks/audit_rules_time_adjtimex.xml b/RHEL6/input/checks/audit_rules_time_adjtimex.xml
> index bbafe7f..ca3b631 100644
> --- a/RHEL6/input/checks/audit_rules_time_adjtimex.xml
> +++ b/RHEL6/input/checks/audit_rules_time_adjtimex.xml
> @@ -8,6 +8,7 @@
>         </affected>
>         <description>Record attempts to alter time through adjtimex.
>         </description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria comment="Test for either..." operator="OR">
>         <criteria comment="both..." operator="AND">
> diff --git a/RHEL6/input/checks/audit_rules_unsuccessful_file_modification.xml b/RHEL6/input/checks/audit_rules_unsuccessful_file_modification.xml
> index 424462b..c2305f3 100644
> --- a/RHEL6/input/checks/audit_rules_unsuccessful_file_modification.xml
> +++ b/RHEL6/input/checks/audit_rules_unsuccessful_file_modification.xml
> @@ -8,6 +8,7 @@
>         </affected>
>         <description>Audit rules about the Unauthorized Access
>         Attempts to Files (unsuccessful) are enabled</description>
> +      <reference source="DS" ref_id="20131011" ref_url="test_attestation" />
>       </metadata>
>       <criteria operator="AND">
>         <criterion comment="audit file eacces" test_ref="test_audit_rules_unsuccessful_file_modification_eacces" />


ack


More information about the scap-security-guide mailing list