[PATCH 2/9] OVAL signoff for accounts_password_all_shadowed TESTING: [user@redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd [user@redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd ftp:secrethash:14:50:FTP User:/var/ftp:/sbin/nologin [user@redhat-thing-1 checks]$ ./testcheck.py no_has^C [user@redhat-thing-1 checks]$ ls | grep hash rpm_verify_hashes.xml set_password_hashing_algorithm_libuserconf.xml set_password_hashing_algorithm_logindefs.xml set_password_hashing_algorithm_systemauth.xml [user@redhat-thing-1 checks]$ ./testcheck.py accounts_password_all_shadowed.xml Evaluating with OVAL tempfile : /tmp/accounts_password_all_shadowednpqbeQ.xml Writing results to : /tmp/accounts_password_all_shadowednpqbeQ.xml-results Definition oval:scap-security-guide.testing:def:110: false Evaluation done. [user@redhat-thing-1 checks]$ awk -F: '($2 != "x") {print}' /etc/passwd [user@redhat-thing-1 checks]$ ./testcheck.py accounts_password_all_shadowed .xml Evaluating with OVAL tempfile : /tmp/accounts_password_all_shadowedUQOSvB.xml Writing results to : /tmp/accounts_password_all_shadowedUQOSvB.xml-results Definition oval:scap-security-guide.testing:def:110: true Evaluation done.

[shawn]

From: Shawn Wells <sh...@redhat.com>

---
 .../checks/accounts_password_all_shadowed.xml      |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/RHEL6/input/checks/accounts_password_all_shadowed.xml 
b/RHEL6/input/checks/accounts_password_all_shadowed.xml
index a360118..7c7c8b1 100644
--- a/RHEL6/input/checks/accounts_password_all_shadowed.xml
+++ b/RHEL6/input/checks/accounts_password_all_shadowed.xml
@@ -10,6 +10,7 @@
     <criteria>
       <criterion comment="password hashes are shadowed" 
test_ref="test_accounts_password_all_shadowed" />
     </criteria>
+    <reference source="swells" ref_id="20130918" ref_url="test_attestation"/>
   </definition>
   <unix:password_test check="all" comment="password hashes are shadowed" 
id="test_accounts_password_all_shadowed" version="1">
     <unix:object object_ref="object_accounts_password_all_shadowed" />
-- 
1.7.1

_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide