On 8/13/13 3:25 PM, Maura Dailey wrote:
How do you think we should handle file owner and group permission
checks on rsyslog files? Should we look for a predetermined list of
files (trying to search for *.log is insufficient, since at the very
least, /var/log/messages, /var/log/secure, and /var/log/maillog would
get passed over)? Or should we try ninja regex to parse rsyslog.conf?
I'm torn. The 'right way' would be regex ninja. However that's hard, and
has resulted in nothing getting done. Personally I'd rather have
*something* hard coded, then evolve into ninja regex.
With that said.... your regex-foo is strong and perhaps you could hack
this out in 15min... ;)
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
