Done. Thanks for the ACK.
-Mike ________________________________________ From: scap-security-guide-bounces@lists.fedorahosted.org [scap-security-guide-bounces@lists.fedorahosted.org] on behalf of Jeffrey Blank [blank@eclipse.ncsc.mil] Sent: Tuesday, August 07, 2012 11:54 AM To: scap-security-guide@lists.fedorahosted.org Subject: Re: [PATCH] Fixed root virtual console logins check.
Uh, yes. Thanks -- good catch. Assuming it always behaved how it looked (you never know with OVAL!) please go ahead and commit the fix.
On 08/06/2012 01:15 PM, Michael Palmiotto wrote:
Shouldn't we be doing a "none_exist" check on this one?
Signed-off-by: Michael Palmiotto mpalmiotto@tresys.com
.../checks/securetty_root_login_console_only.xml | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/RHEL6/input/checks/securetty_root_login_console_only.xml b/RHEL6/input/checks/securetty_root_login_console_only.xml index c3472e6..1bb1de3 100644 --- a/RHEL6/input/checks/securetty_root_login_console_only.xml +++ b/RHEL6/input/checks/securetty_root_login_console_only.xml @@ -15,7 +15,7 @@ </criteria>
</definition>
- <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="virtual consoles /etc/securetty" id="test_virtual_consoles_etc_securetty" version="1">
- <ind:textfilecontent54_test check="all" check_existence="none_exist" comment="virtual consoles /etc/securetty" id="test_virtual_consoles_etc_securetty" version="1"> <ind:object object_ref="object_virtual_consoles_etc_securetty" /> </ind:textfilecontent54_test>
_______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide