[PATCH] Move disable_prelink OVAL check to shared
Jan Lieskovsky
jlieskov at redhat.com
Thu Mar 13 16:34:04 UTC 2014
Patch summary:
[shared] Move disable_prelink OVAL check to shared
[shared] disable_prelink: Allow spaces around PRELINKING=no expression
[shared] disable_prelink: Allow comments
[Fedora] Start using shared version
[RHEL/6] The same
Patch details:
Based on definition in /etc/cron.daily/prelink:
#!/bin/sh
. /etc/sysconfig/prelink
...
the /etc/sysconfig/prelink file should follow the syntax / format recognized
by Bash scripts (i.e. no spaces allowed around the '=' character, comments starting with
#, whitespace ignored etc.).
Based on that modify the definition of disable_prelink.xml OVAL check it to
support this format (IOW allow it to pass also in case like:
\tPRELINKING=no\t# This setting should disable prelinking
).
Besides that move RHEL/6/ and Fedora disable_prelink.xml version to shared/ directory.
Update script versioning and test attestations.
The change tested on both RHEL-6 and Fedora systems and seems to be working properly.
Please review.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-shared-Move-disable_prelink-OVAL-check-to-shared.patch
Type: text/x-patch
Size: 5922 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140313/82cd454e/attachment.bin>
More information about the scap-security-guide
mailing list