<div dir="ltr">NACK on nit-picky RE issues...<div><br></div><div>I believe it is sufficient to only make the surrounding subpattern non-matchable...</div><div><span style="font-family:arial,sans-serif;font-size:12.666666984558105px">(?:</span><span style="font-family:arial,sans-serif;font-size:12.666666984558105px">hard|-)</span><br>
</div><div><span style="font-family:arial,sans-serif;font-size:12.666666984558105px">instead of</span></div><div><span style="font-family:arial,sans-serif;font-size:12.666666984558105px">(?:(?:</span><span style="font-family:arial,sans-serif;font-size:12.666666984558105px">hard)|(?:-))</span><br>
</div><div><br></div><div class="gmail_extra">I actually had success with no subpattern at all:</div><div class="gmail_extra">hard|-</div><div class="gmail_extra">but I'm not clear why.</div><div class="gmail_extra">
<br>
</div><div class="gmail_extra">Good catch though, I was about to put my patch for this one up. :)<br><br><div class="gmail_quote">On Mon, May 19, 2014 at 1:44 PM, Paul Tittle <span dir="ltr"><<a href="mailto:ptittle@cmf.nrl.navy.mil" target="_blank">ptittle@cmf.nrl.navy.mil</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">---<br>
.../accounts_max_concurrent_login_sessions.xml | 2 +-<br>
1 files changed, 1 insertions(+), 1 deletions(-)<br>
<br>
diff --git a/RHEL/6/input/checks/accounts_max_concurrent_login_sessions.xml b/RHEL/6/input/checks/accounts_max_concurrent_login_sessions.xml<br>
index b08faa5..868c58e 100644<br>
--- a/RHEL/6/input/checks/accounts_max_concurrent_login_sessions.xml<br>
+++ b/RHEL/6/input/checks/accounts_max_concurrent_login_sessions.xml<br>
@@ -21,7 +21,7 @@<br>
<br>
<ind:textfilecontent54_object id="object_etc_security_limits_conf_maxlogins" version="1"><br>
<ind:filepath>/etc/security/limits.conf</ind:filepath><br>
- <ind:pattern operation="pattern match">^[\s]*\*[\s]+[hard|-][\s]+maxlogins[\s]+(\d+)\s*$</ind:pattern><br>
+ <ind:pattern operation="pattern match">^[\s]*\*[\s]+(?:(?:hard)|(?:-))[\s]+maxlogins[\s]+(\d+)\s*$</ind:pattern><br>
<ind:instance datatype="int">1</ind:instance><br>
</ind:textfilecontent54_object><br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
1.7.1<br>
<br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</font></span></blockquote></div><br></div></div>