[PATCH 0/3] OVAL cleanup & bash remediation scripts

Shawn Wells shawn at redhat.com
Sat Oct 26 04:45:03 UTC 2013


>From fbf84704a4d14f9d2e2df344212462255d7ddff7 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Sat, 26 Oct 2013 00:43:47 -0400
Subject: [PATCH 0/3] OVAL cleanup & bash remediation scripts

- Ensured XCCDF/OVAL naming parity
- Added associated bash remediation scripts

Shawn Wells (3):
  OVAL update for file_owner_etc_shadow     - XCCDF/OVAL naming update,
    file_owner_etc_shadow => userowner_shadow_file     - Added
    remediation script     - filepath/filename OVAL tag
  OVAL + bash remediation update for groupowner_shadow_file     -
    XCCDF/OVAL naming, file_groupowner_etc_shadow =>
    groupowner_shadow_file     - Added bash remediation
  OVAL + bash remediation - file_permissions_etc_shadow     - Updated
    XCCDF/OVAL namings, perms_shadow_file =>
    file_permissions_etc_shadow     - Added bash remediation script

 RHEL6/input/checks/file_groupowner_etc_shadow.xml  |   29 -----------------
 RHEL6/input/checks/file_owner_etc_shadow.xml       |   33 --------------------
 RHEL6/input/checks/file_permissions_etc_shadow.xml |    3 +-
 RHEL6/input/checks/groupowner_shadow_file.xml      |   29 +++++++++++++++++
 RHEL6/input/checks/userowner_shadow_file.xml       |   32 +++++++++++++++++++
 .../fixes/bash/file_permissions_etc_shadow.sh      |    1 +
 RHEL6/input/fixes/bash/groupowner_shadow_file.sh   |    1 +
 RHEL6/input/fixes/bash/userowner_shadow_file.sh    |    1 +
 RHEL6/input/profiles/CS2.xml                       |    2 +-
 RHEL6/input/profiles/common.xml                    |    2 +-
 RHEL6/input/profiles/fisma-medium-rhel6-server.xml |    2 +-
 RHEL6/input/profiles/nist-CL-IL-AL.xml             |    2 +-
 RHEL6/input/profiles/rht-ccp.xml                   |    2 +-
 RHEL6/input/profiles/usgcb-rhel6-server.xml        |    2 +-
 RHEL6/input/system/permissions/files.xml           |    6 ++--
 15 files changed, 74 insertions(+), 73 deletions(-)
 delete mode 100644 RHEL6/input/checks/file_groupowner_etc_shadow.xml
 delete mode 100644 RHEL6/input/checks/file_owner_etc_shadow.xml
 create mode 100644 RHEL6/input/checks/groupowner_shadow_file.xml
 create mode 100644 RHEL6/input/checks/userowner_shadow_file.xml
 create mode 100644 RHEL6/input/fixes/bash/file_permissions_etc_shadow.sh
 create mode 100644 RHEL6/input/fixes/bash/groupowner_shadow_file.sh
 create mode 100644 RHEL6/input/fixes/bash/userowner_shadow_file.sh



More information about the scap-security-guide mailing list