Signed-off-by: Willy Santos wsantos@redhat.com --- .../checks/dovecot_login_process_per_conn_yes.xml | 28 ++++++++++++++++++++ 1 files changed, 28 insertions(+), 0 deletions(-) create mode 100644 rhel6/src/input/checks/dovecot_login_process_per_conn_yes.xml
diff --git a/rhel6/src/input/checks/dovecot_login_process_per_conn_yes.xml b/rhel6/src/input/checks/dovecot_login_process_per_conn_yes.xml new file mode 100644 index 0000000..d1569ea --- /dev/null +++ b/rhel6/src/input/checks/dovecot_login_process_per_conn_yes.xml @@ -0,0 +1,28 @@ +<def-group> + <definition class="compliance" + id="dovecot_login_process_per_conn_yes" version="1"> + <metadata> + <title>Enable login_process_per_connection in Dovecot</title> + <affected family="unix"> + <platform>Red Hat Enterprise Linux 6</platform> + </affected> + <reference ref_id="CCE-4410-7" source="CCE" /> + <description>login_process_per_connection should be enabled.</description> + </metadata> + <criteria comment="Enable login_process_per_connection in Dovecot"> + <criterion test_ref="test_dovecot_login_process_per_conn_yes" /> + </criteria> + </definition> + <ind:textfilecontent54_test check="all" check_existence="all_exist" + comment="Tests the value of the login_process_per_connection[\s]*(<:nocomment:>*) setting in the /etc/dovecot.conf file" + id="test_dovecot_login_process_per_conn_yes" version="1"> + <ind:object object_ref="obj_dovecot_login_process_per_conn_yes" /> + </ind:textfilecontent54_test> + <ind:textfilecontent54_object id="obj_dovecot_login_process_per_conn_yes" + version="1"> + ind:path/etc</ind:path> + ind:filenamedovecot.conf</ind:filename> + <ind:pattern operation="pattern match">^[\s]*login_process_per_connection[\s]*=[\s]*yes\s*$</ind:pattern> + <ind:instance datatype="int">1</ind:instance> + </ind:textfilecontent54_object> +</def-group>
scap-security-guide@lists.fedorahosted.org