[PATCH 5/9] OVAL signoff: file_groupowner_etc_shadow

shawn at redhat.com shawn at redhat.com
Wed Sep 18 20:38:56 UTC 2013


From: Shawn Wells <shawn at redhat.com>

[user at redhat-thing-1 checks]$ ls -lL /etc/shadow
----------. 1 root user 1126 Sep 16 12:58 /etc/shadow
[user at redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_shadow.xml
Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_shadowrd4xQR.xml
Writing results to : /tmp/file_groupowner_etc_shadowrd4xQR.xml-results
Definition oval:scap-security-guide.testing:def:114: false
Evaluation done.
[user at redhat-thing-1 checks]$ sudo chgrp root /etc/shadow ; ls -lL /etc/shadow
----------. 1 root root 1126 Sep 16 12:58 /etc/shadow
[user at redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_shadow.xml
Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_shadowwrJXlu.xml
Writing results to : /tmp/file_groupowner_etc_shadowwrJXlu.xml-results
Definition oval:scap-security-guide.testing:def:114: true
Evaluation done.
[user at redhat-thing-1 checks]$ vim file_groupowner_etc_shadow.xml
[user at redhat-thing-1 checks]$ git commit file_groupowner_etc_shadow.xml
Aborting commit due to empty commit message.
---
 RHEL6/input/checks/file_groupowner_etc_shadow.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/checks/file_groupowner_etc_shadow.xml b/RHEL6/input/checks/file_groupowner_etc_shadow.xml
index 953c869..579e1d8 100644
--- a/RHEL6/input/checks/file_groupowner_etc_shadow.xml
+++ b/RHEL6/input/checks/file_groupowner_etc_shadow.xml
@@ -7,6 +7,7 @@
       </affected>
       <description>The /etc/shadow file should be owned by the appropriate
       group.</description>
+      <reference source="swells" ref_id="20130918" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion test_ref="test_groupowner_etc_shadow" />
@@ -23,7 +24,6 @@
   </unix:file_state>
   <unix:file_object comment="/etc/shadow"
   id="object_file_groupowner_etc_shadow" version="1">
-    <unix:path>/etc</unix:path>
-    <unix:filename>shadow</unix:filename>
+    <unix:filepath>/etc/shadow</unix:filepath>
   </unix:file_object>
 </def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list