<def-group>
  <definition class="compliance" id="ensure_gpgcheck_globally_activated" version="1">
    <metadata>
      <title>Ensure Yum gpgcheck Globally Activated</title>
      <affected family="unix">
        <platform>multi_platform_all</platform>
      </affected>
      <description>The gpgcheck option should be used to ensure that checking
      of an RPM package's signature always occurs prior to its
      installation.</description>
      <reference source="MED" ref_id="20130807" ref_url="test_attestation" />
      <!-- rhel7: <reference source="SDW" ref_id="20131223" ref_url="test_attestation" /> -->
    </metadata>
    <criteria>
      <criterion comment="check value of gpgcheck in /etc/yum.conf" test_ref="test_ensure_gpgcheck_globally_activated" />
    </criteria>
  </definition>
  <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="check value of gpgcheck in /etc/yum.conf" id="test_ensure_gpgcheck_globally_activated" version="1">
    <ind:object object_ref="object_ensure_gpgcheck_globally_activated" />
  </ind:textfilecontent54_test>
  <ind:textfilecontent54_object id="object_ensure_gpgcheck_globally_activated" comment="gpgcheck set in /etc/yum.conf" version="1">
    <ind:filepath>/etc/yum.conf</ind:filepath>
    <ind:pattern operation="pattern match">^\s*gpgcheck\s*=\s*1\s*$</ind:pattern>
    <ind:instance datatype="int" operation="equals">1</ind:instance>
  </ind:textfilecontent54_object>
</def-group>
