File: shared.xml

package info (click to toggle)
scap-security-guide 0.1.65-1
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 71,936 kB
  • sloc: xml: 179,374; sh: 69,771; python: 23,819; makefile: 23
file content (26 lines) | stat: -rw-r--r-- 1,352 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
<def-group>
  <definition class="compliance" id="sssd_enable_pam_services" version="1">
    {{{ oval_metadata("SSSD should be configured to run SSSD PAM services.
      ") }}}
    <criteria>
        <criterion comment="check if pam is configured in the services setting of the sssd section"
        test_ref="test_sssd_enable_pam_services" />
    </criteria>
  </definition>
  <ind:textfilecontent54_test check="all" check_existence="all_exist"
  comment="check if pam is configured in the services setting of the sssd section"
  id="test_sssd_enable_pam_services" version="1">
    <ind:object object_ref="obj_sssd_enable_pam_services" />
    <ind:state state_ref="state_sssd_enable_pam_services" />
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="obj_sssd_enable_pam_services" version="1">
    <ind:filepath operation="pattern match">^/etc/sssd/(sssd|conf\.d/.*)\.conf$</ind:filepath>
    <ind:pattern operation="pattern match">^\s*\[sssd\].*(?:\n\s*[^[\s].*)*\n\s*services[ \t]*=[ \t]*(.*)$</ind:pattern>
    <ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
  </ind:textfilecontent54_object>

  <ind:textfilecontent54_state id="state_sssd_enable_pam_services" version="1">
    <ind:subexpression operation="pattern match">^.*pam.*$</ind:subexpression>
  </ind:textfilecontent54_state>
</def-group>