Per discussions on the list, there's really no need to use 'symlinks and 
directories' here.

Signed-off-by: Shawn Wells <[email protected]>
---
 RHEL/6/input/checks/no_files_unowned_by_user.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL/6/input/checks/no_files_unowned_by_user.xml 
b/RHEL/6/input/checks/no_files_unowned_by_user.xml
index f3f1276..27081f1 100644
--- a/RHEL/6/input/checks/no_files_unowned_by_user.xml
+++ b/RHEL/6/input/checks/no_files_unowned_by_user.xml
@@ -28,7 +28,7 @@
   </ind:textfilecontent54_object>
 
   <unix:file_object comment="all local files" 
id="file_permissions_unowned_object" version="1">
-    <unix:behaviors recurse="symlinks and directories" 
recurse_direction="down" recurse_file_system="local" />
+    <unix:behaviors recurse="directories" recurse_direction="down" 
recurse_file_system="local" />
     <unix:path>/</unix:path>
     <unix:filename operation="pattern match">.*</unix:filename>
     <filter 
action="exclude">file_permissions_unowned_userid_list_match</filter>
-- 
1.7.1

_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

Reply via email to