[PATCH 16/21] [bugfix] Update selinux_all_devicefiles to "any_exist"

Shawn Wells shawn at redhat.com
Mon Jul 28 03:42:27 UTC 2014


On 7/27/14, 11:27 PM, Shawn Wells wrote:
> From: Leland Steinke<leland.j.steinke.ctr at mail.mil>
>
>
> Signed-off-by: Leland Steinke<leland.j.steinke.ctr at mail.mil>
> ---
>   .../checks/selinux_all_devicefiles_labeled.xml     |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL/6/input/checks/selinux_all_devicefiles_labeled.xml b/RHEL/6/input/checks/selinux_all_devicefiles_labeled.xml
> index fe9f343..b160322 100644
> --- a/RHEL/6/input/checks/selinux_all_devicefiles_labeled.xml
> +++ b/RHEL/6/input/checks/selinux_all_devicefiles_labeled.xml
> @@ -11,7 +11,7 @@
>         <criterion comment="unlabeled_t in /dev" test_ref="test_selinux_all_devicefiles_labeled" />
>       </criteria>
>     </definition>
> -  <linux:selinuxsecuritycontext_test check="none satisfy" check_existence="all_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
> +  <linux:selinuxsecuritycontext_test check="none satisfy" check_existence="any_exist" comment="unlabeled_t in /dev" id="test_selinux_all_devicefiles_labeled" version="1">
>       <linux:object object_ref="object_selinux_all_devicefiles_labeled" />
>       <linux:state state_ref="state_selinux_all_devicefiles_labeled" />
>     </linux:selinuxsecuritycontext_test>
> -- 1.7.1

ack
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140727/4f656cb6/attachment.html>


More information about the scap-security-guide mailing list