[PATCH] [RHEL/6] Don't require exact permissions on httpd directories / files (AKA allow also stronger permissions to meet the checks)

Jan Lieskovsky jlieskov at redhat.com
Thu Apr 3 14:04:39 UTC 2014


[RHEL/6] Don't require exact permissions on httpd directories / files:
         * 0700 on /var/log/httpd directory
         * 0750 on /etc/httpd/conf directory
         * 0640 on /etc/httpd/conf/* files
         But allow also systems having stronger permission requirements
         on these files to meet the checks / policy.

Besides that the HTML version of the guide has spoken about 0700 mode
requirement for permissions of the /var/log/httpd directory (but in fact
the corresponding OVAL check was checking 0750 mode). This patch fixes
this inconsistency too (by making the OVAL check to check against 0700 mode).

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-RHEL-6-Don-t-require-exact-permissions-on-httpd-dire.patch
Type: text/x-patch
Size: 6347 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140403/ba8598f1/attachment.bin>


More information about the scap-security-guide mailing list