|
|
dac76a |
From 4fc0688db8f97d1ee10bfd5162764ffef57356c9 Mon Sep 17 00:00:00 2001
|
|
|
dac76a |
From: =?UTF-8?q?Mat=C4=9Bj=20T=C3=BD=C4=8D?= <matyc@redhat.com>
|
|
|
dac76a |
Date: Wed, 22 Apr 2020 16:58:12 +0200
|
|
|
dac76a |
Subject: [PATCH] Added a warning to rules about only local user backends being
|
|
|
dac76a |
considered.
|
|
|
dac76a |
|
|
|
dac76a |
---
|
|
|
dac76a |
.../permissions/files/file_permissions_ungroupowned/rule.yml | 5 +++++
|
|
|
dac76a |
.../permissions/files/no_files_unowned_by_user/rule.yml | 5 +++++
|
|
|
dac76a |
2 files changed, 10 insertions(+)
|
|
|
dac76a |
|
|
|
dac76a |
diff --git a/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml b/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
|
|
|
dac76a |
index dba303d0ed..e99d035831 100644
|
|
|
dac76a |
--- a/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
|
|
|
dac76a |
+++ b/linux_os/guide/system/permissions/files/file_permissions_ungroupowned/rule.yml
|
|
|
dac76a |
@@ -53,3 +53,8 @@ ocil: |-
|
|
|
dac76a |
Either remove all files and directories from the system that do not have a valid group,
|
|
|
dac76a |
or assign a valid group with the chgrp command:
|
|
|
dac76a |
$ sudo chgrp group file
|
|
|
dac76a |
+
|
|
|
dac76a |
+warnings:
|
|
|
dac76a |
+ - general: |-
|
|
|
dac76a |
+ This rule only considers local groups.
|
|
|
dac76a |
+ If you have your groups defined outside /etc/group , the rule won't consider those.
|
|
|
dac76a |
diff --git a/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml b/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
|
|
|
dac76a |
index 7cd9b787a4..72bf327519 100644
|
|
|
dac76a |
--- a/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
|
|
|
dac76a |
+++ b/linux_os/guide/system/permissions/files/no_files_unowned_by_user/rule.yml
|
|
|
dac76a |
@@ -54,3 +54,8 @@ ocil: |-
|
|
|
dac76a |
valid user, or assign a valid user to all unowned files and directories on
|
|
|
dac76a |
the system with the <tt>chown</tt> command:
|
|
|
dac76a |
$ sudo chown <tt>user</tt> <tt>file</tt>
|
|
|
dac76a |
+
|
|
|
dac76a |
+warnings:
|
|
|
dac76a |
+ - general: |-
|
|
|
dac76a |
+ This rule only considers local users.
|
|
|
dac76a |
+ If you have your users defined outside /etc/passwd , the rule won't consider those.
|