Blame SOURCES/scap-security-guide-0.1.50-warn_nonlocal_users_groups.patch

dac76a
From 4fc0688db8f97d1ee10bfd5162764ffef57356c9 Mon Sep 17 00:00:00 2001
dac76a
From: =?UTF-8?q?Mat=C4=9Bj=20T=C3=BD=C4=8D?= <matyc@redhat.com>
dac76a
Date: Wed, 22 Apr 2020 16:58:12 +0200
dac76a
Subject: [PATCH] Added a warning to rules about only local user backends being
dac76a
 considered.
dac76a
dac76a
---
dac76a
 .../permissions/files/file_permissions_ungroupowned/rule.yml | 5 +++++
dac76a
 .../permissions/files/no_files_unowned_by_user/rule.yml      | 5 +++++
dac76a
 2 files changed, 10 insertions(+)
dac76a
dac76a
diff --git a/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
dac76a
index dba303d0ed..e99d035831 100644
dac76a
--- a/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
dac76a
+++ b/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
dac76a
@@ -53,3 +53,8 @@ ocil: |-
dac76a
     Either remove all files and directories from the system that do not have a valid group,
dac76a
     or assign a valid group with the chgrp command:
dac76a
     
$ sudo chgrp group file
dac76a
+
dac76a
+warnings:
dac76a
+    - general: |-
dac76a
+        This rule only considers local groups.
dac76a
+        If you have your groups defined outside /etc/group, the rule won't consider those.
dac76a
diff --git a/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml b/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
dac76a
index 7cd9b787a4..72bf327519 100644
dac76a
--- a/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
dac76a
+++ b/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
dac76a
@@ -54,3 +54,8 @@ ocil: |-
dac76a
     valid user, or assign a valid user to all unowned files and directories on
dac76a
     the system with the <tt>chown</tt> command:
dac76a
     
$ sudo chown <tt>user</tt> <tt>file</tt>
dac76a
+
dac76a
+warnings:
dac76a
+    - general: |-
dac76a
+        This rule only considers local users.
dac76a
+        If you have your users defined outside /etc/passwd, the rule won't consider those.