Agreed; ack.

On Fri, May 23, 2014 at 9:35 PM, Shawn Wells <[email protected]> wrote:

> Per discussions on the list, there's really no need to use 'symlinks and
> directories' here.
>
> Signed-off-by: Shawn Wells <[email protected]>
> ---
>  RHEL/6/input/checks/no_files_unowned_by_user.xml |    2 +-
>  1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/RHEL/6/input/checks/no_files_unowned_by_user.xml
> b/RHEL/6/input/checks/no_files_unowned_by_user.xml
> index f3f1276..27081f1 100644
> --- a/RHEL/6/input/checks/no_files_unowned_by_user.xml
> +++ b/RHEL/6/input/checks/no_files_unowned_by_user.xml
> @@ -28,7 +28,7 @@
>    </ind:textfilecontent54_object>
>
>    <unix:file_object comment="all local files"
> id="file_permissions_unowned_object" version="1">
> -    <unix:behaviors recurse="symlinks and directories"
> recurse_direction="down" recurse_file_system="local" />
> +    <unix:behaviors recurse="directories" recurse_direction="down"
> recurse_file_system="local" />
>      <unix:path>/</unix:path>
>      <unix:filename operation="pattern match">.*</unix:filename>
>      <filter
> action="exclude">file_permissions_unowned_userid_list_match</filter>
> --
> 1.7.1
>
> _______________________________________________
> scap-security-guide mailing list
> [email protected]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>



-- 
David Smith
Sr. Information Security Engineer
Secure Innovations, LLC
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

Reply via email to