[PATCH] Move disable_prelink OVAL check to shared

Jan Lieskovsky jlieskov at redhat.com
Thu Mar 13 16:34:04 UTC 2014


Patch summary:

    [shared] Move disable_prelink OVAL check to shared
    [shared] disable_prelink: Allow spaces around PRELINKING=no expression
    [shared] disable_prelink: Allow comments
    [Fedora] Start using shared version
    [RHEL/6] The same

Patch details:

Based on definition in /etc/cron.daily/prelink:
  
  #!/bin/sh

  . /etc/sysconfig/prelink
  ...

the /etc/sysconfig/prelink file should follow the syntax / format recognized
by Bash scripts (i.e. no spaces allowed around the '=' character, comments starting with
#, whitespace ignored etc.).

Based on that modify the definition of disable_prelink.xml OVAL check it to
support this format (IOW allow it to pass also in case like:

  \tPRELINKING=no\t# This setting should disable prelinking

).

Besides that move RHEL/6/ and Fedora disable_prelink.xml version to shared/ directory.
Update script versioning and test attestations.

The change tested on both RHEL-6 and Fedora systems and seems to be working properly.

Please review.

Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-shared-Move-disable_prelink-OVAL-check-to-shared.patch
Type: text/x-patch
Size: 5922 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140313/82cd454e/attachment.bin>


More information about the scap-security-guide mailing list