[PATCH 2/9] OVAL signoff for accounts_password_all_shadowed TESTING: [user at redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd [user at redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd ftp:secrethash:14:50:FTP User:/var/ftp:/sbin/nologin [user at redhat-thing-1 checks]$ ./testcheck.py no_has^C [user at redhat-thing-1 checks]$ ls | grep hash rpm_verify_hashes.xml set_password_hashing_algorithm_libuserconf.xml set_password_hashing_algorithm_logindefs.xml set_password_hashing_algorithm_systemauth.xml [user at redhat-thing-1 checks]$ ./testcheck.py accounts_password_all_shadowed.xml Evaluating with OVAL tempfile : /tmp/accounts_password_all_shadowednpqbeQ.xml Writing results to : /tmp/accounts_password_all_shadowednpqbeQ.xml-results Definition oval:scap-security-guide.testing:def:110: false Evaluation done. [user at redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd [user at redhat-thing-1 checks]$ ./testcheck.py accounts_password_all_shadowed .xml Evaluating with OVAL tempfile : /tmp/accounts_password_all_shadowedUQOSvB.xml Writing results to : /tmp/accounts_password_all_shadowedUQOSvB.xml-results Definition oval:scap-security-guide.testing:def:110: true Evaluation done.
shawn at redhat.com
shawn at redhat.com
Wed Sep 18 20:38:53 UTC 2013
From: Shawn Wells <shawn at redhat.com>
---
.../checks/accounts_password_all_shadowed.xml | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/RHEL6/input/checks/accounts_password_all_shadowed.xml b/RHEL6/input/checks/accounts_password_all_shadowed.xml
index a360118..7c7c8b1 100644
--- a/RHEL6/input/checks/accounts_password_all_shadowed.xml
+++ b/RHEL6/input/checks/accounts_password_all_shadowed.xml
@@ -10,6 +10,7 @@
<criteria>
<criterion comment="password hashes are shadowed" test_ref="test_accounts_password_all_shadowed" />
</criteria>
+ <reference source="swells" ref_id="20130918" ref_url="test_attestation"/>
</definition>
<unix:password_test check="all" comment="password hashes are shadowed" id="test_accounts_password_all_shadowed" version="1">
<unix:object object_ref="object_accounts_password_all_shadowed" />
--
1.7.1
More information about the scap-security-guide
mailing list