[PATCH] [bugfix] no_files_unowned_by_user, 'symlinks and directories' -> 'directories'

David Smith dsmith at secure-innovations.net
Sat May 24 01:48:33 UTC 2014


Agreed; ack.


On Fri, May 23, 2014 at 9:35 PM, Shawn Wells <shawn at redhat.com> wrote:

> Per discussions on the list, there's really no need to use 'symlinks and
> directories' here.
>
> Signed-off-by: Shawn Wells <shawn at redhat.com>
> ---
>  RHEL/6/input/checks/no_files_unowned_by_user.xml |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL/6/input/checks/no_files_unowned_by_user.xml
> b/RHEL/6/input/checks/no_files_unowned_by_user.xml
> index f3f1276..27081f1 100644
> --- a/RHEL/6/input/checks/no_files_unowned_by_user.xml
> +++ b/RHEL/6/input/checks/no_files_unowned_by_user.xml
> @@ -28,7 +28,7 @@
>    </ind:textfilecontent54_object>
>
>    <unix:file_object comment="all local files"
> id="file_permissions_unowned_object" version="1">
> -    <unix:behaviors recurse="symlinks and directories"
> recurse_direction="down" recurse_file_system="local" />
> +    <unix:behaviors recurse="directories" recurse_direction="down"
> recurse_file_system="local" />
>      <unix:path>/</unix:path>
>      <unix:filename operation="pattern match">.*</unix:filename>
>      <filter
> action="exclude">file_permissions_unowned_userid_list_match</filter>
> --
> 1.7.1
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>



-- 
David Smith
Sr. Information Security Engineer
Secure Innovations, LLC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140523/c63d1945/attachment.html>


More information about the scap-security-guide mailing list