[PATCH 1/2] [bugfix RHEL6] Updates to gconf_gnome_screensaver_idle_delay

Shawn Wells shawn at redhat.com
Fri May 23 00:52:53 UTC 2014


As identified by Carlos M., the gconf_gnome_screensaver_idle_delay check needed updating per
Red Hat bug 867945<https://bugzilla.redhat.com/show_bug.cgi?id=867945>

Testing for <= conditions:

[shawnw at ssg-rhel6-devbox checks]$ sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --type int --set /desktop/gnome/session/idle_delay 15
[shawnw at ssg-rhel6-devbox checks]$ gconftool-2 -g /desktop/gnome/session/idle_delay
15
[shawnw at ssg-rhel6-devbox checks]$ ./testcheck.py gconf_gnome_screensaver_idle_delay.xml
external_variable with id : inactivity_timeout_value
Evaluating with OVAL tempfile : /tmp/gconf_gnome_screensaver_idle_delay9I6ODL.xml
Writing results to : /tmp/gconf_gnome_screensaver_idle_delay9I6ODL.xml-results
Definition oval:scap-security-guide.testing:def:199: true
Definition oval:scap-security-guide.testing:def:198: true

[shawnw at ssg-rhel6-devbox checks]$ sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --type int --set /desktop/gnome/session/idle_delay 10
[shawnw at ssg-rhel6-devbox checks]$ ./testcheck.py gconf_gnome_screensaver_idle_delay.xml
external_variable with id : inactivity_timeout_value
Evaluating with OVAL tempfile : /tmp/gconf_gnome_screensaver_idle_delayMU0FZv.xml
Writing results to : /tmp/gconf_gnome_screensaver_idle_delayMU0FZv.xml-results
Definition oval:scap-security-guide.testing:def:199: true
Definition oval:scap-security-guide.testing:def:198: true
Evaluation done.

Testing for > conditions:
[shawnw at ssg-rhel6-devbox checks]$ sudo gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --type int --set /desktop/gnome/session/idle_delay 100
[shawnw at ssg-rhel6-devbox checks]$ ./testcheck.py gconf_gnome_screensaver_idle_delay.xml
external_variable with id : inactivity_timeout_value
Evaluating with OVAL tempfile : /tmp/gconf_gnome_screensaver_idle_delayfWk9E5.xml
Writing results to : /tmp/gconf_gnome_screensaver_idle_delayfWk9E5.xml-results
Definition oval:scap-security-guide.testing:def:199: true
Definition oval:scap-security-guide.testing:def:198: false
Evaluation done.

Signed-off-by: Shawn Wells <shawn at redhat.com>
---
 .../checks/gconf_gnome_screensaver_idle_delay.xml  |    6 +++---
 RHEL/6/input/system/accounts/physical.xml          |    4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/RHEL/6/input/checks/gconf_gnome_screensaver_idle_delay.xml b/RHEL/6/input/checks/gconf_gnome_screensaver_idle_delay.xml
index c77e608..00f11df 100644
--- a/RHEL/6/input/checks/gconf_gnome_screensaver_idle_delay.xml
+++ b/RHEL/6/input/checks/gconf_gnome_screensaver_idle_delay.xml
@@ -1,5 +1,5 @@
 <def-group>
-  <definition class="compliance" id="gconf_gnome_screensaver_idle_delay" version="1">
+  <definition class="compliance" id="gconf_gnome_screensaver_idle_delay" version="2">
     <metadata>
       <title>Configure GUI Screen Locking</title>
       <affected family="unix">
@@ -7,7 +7,7 @@
       </affected>
       <description>The allowed period of inactivity before the screensaver is
       activated.</description>
-      <reference source="MED" ref_id="20131125" ref_url="test_attestation" />
+      <reference source="SDW" ref_id="20140522" ref_url="test_attestation" />
     </metadata>
     <criteria operator="OR">
       <extend_definition comment="GConf2 installed" definition_ref="package_GConf2_installed" negate="true" />
@@ -21,7 +21,7 @@
     <ind:state state_ref="state_gnome_screensaver_idle_delay" />
   </ind:xmlfilecontent_test>
   <ind:xmlfilecontent_object id="object_gnome_screensaver_idle_delay" version="1">
-    <ind:filepath>/etc/gconf/gconf.xml.mandatory/apps/gnome-screensaver/%gconf.xml</ind:filepath>
+    <ind:filepath>/etc/gconf/gconf.xml.mandatory/desktop/gnome/session/%gconf.xml</ind:filepath>
     <ind:xpath>/gconf/entry[@name='idle_delay']/@value</ind:xpath>
   </ind:xmlfilecontent_object>
   <ind:xmlfilecontent_state comment="idle timeout"
diff --git a/RHEL/6/input/system/accounts/physical.xml b/RHEL/6/input/system/accounts/physical.xml
index 4d7c0e6..e36056e 100644
--- a/RHEL/6/input/system/accounts/physical.xml
+++ b/RHEL/6/input/system/accounts/physical.xml
@@ -261,11 +261,11 @@ inactivity in the GNOME desktop to 15 minutes:
   --direct \
   --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
   --type int \
-  --set /apps/gnome-screensaver/idle_delay 15</pre>
+  --set /desktop/gnome/session/idle_delay 15</pre>
 </description>
 <ocil clause="it is not">
 To check the current idle time-out value, run the following command:
-<pre>$ gconftool-2 -g /apps/gnome-screensaver/idle_delay</pre>
+<pre>$ gconftool-2 -g /desktop/gnome/session/idle_delay</pre>
 If properly configured, the output should be <tt>15</tt>. 
 </ocil>
 <rationale>
-- 
1.7.1



More information about the scap-security-guide mailing list