[PATCH 9/9] OVAL signoff file_permissions_etc_group

shawn at redhat.com shawn at redhat.com
Wed Sep 18 20:39:00 UTC 2013


From: Shawn Wells <shawn at redhat.com>

[user at redhat-thing-1 checks]$ ls -l /etc/group
-rw-r--r--. 1 root user 882 Sep 16 12:58 /etc/group
[user at redhat-thing-1 checks]$ ./testcheck.py file_permissions_etc_group.xml
Evaluating with OVAL tempfile : /tmp/file_permissions_etc_groupqcewSo.xml
Writing results to : /tmp/file_permissions_etc_groupqcewSo.xml-results
Definition oval:scap-security-guide.testing:def:130: true
Evaluation done.
[user at redhat-thing-1 checks]$ sudo chmod 777 /etc/group ; ls -l /etc/group
-rwxrwxrwx. 1 root user 882 Sep 16 12:58 /etc/group
[user at redhat-thing-1 checks]$ ./testcheck.py file_permissions_etc_group.xml
Evaluating with OVAL tempfile : /tmp/file_permissions_etc_group70x6Hd.xml
Writing results to : /tmp/file_permissions_etc_group70x6Hd.xml-results
Definition oval:scap-security-guide.testing:def:130: false
Evaluation done.
---
 RHEL6/input/checks/file_permissions_etc_group.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/checks/file_permissions_etc_group.xml b/RHEL6/input/checks/file_permissions_etc_group.xml
index c547656..1139e02 100644
--- a/RHEL6/input/checks/file_permissions_etc_group.xml
+++ b/RHEL6/input/checks/file_permissions_etc_group.xml
@@ -7,6 +7,7 @@
       </affected>
       <description>File permissions for /etc/group should be set
       correctly.</description>
+      <reference source="swells" ref_id="20130918" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion test_ref="test_file_permissions_etc_group" />
@@ -31,7 +32,6 @@
   </unix:file_state>
   <unix:file_object comment="/etc/group" id="object_file_permissions_etc_group"
   version="1">
-    <unix:path>/etc</unix:path>
-    <unix:filename>group</unix:filename>
+    <unix:filepath>/etc/group</unix:filepath>
   </unix:file_object>
 </def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list