1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
<def-group>
<definition class="compliance" id="sssd_enable_pam_services" version="1">
{{{ oval_metadata("SSSD should be configured to run SSSD PAM services.
", rule_title=rule_title) }}}
<criteria>
<criterion comment="check if pam is configured in the services setting of the sssd section"
test_ref="test_sssd_enable_pam_services" />
</criteria>
</definition>
<ind:textfilecontent54_test check="all" check_existence="all_exist"
comment="check if pam is configured in the services setting of the sssd section"
id="test_sssd_enable_pam_services" version="1">
<ind:object object_ref="obj_sssd_enable_pam_services" />
<ind:state state_ref="state_sssd_enable_pam_services" />
</ind:textfilecontent54_test>
<ind:textfilecontent54_object id="obj_sssd_enable_pam_services" version="1">
<ind:filepath operation="pattern match">^/etc/sssd/(sssd|conf\.d/.*)\.conf$</ind:filepath>
<ind:pattern operation="pattern match">^\s*\[sssd\].*(?:\n\s*[^[\s].*)*\n\s*services[ \t]*=[ \t]*(.*)$</ind:pattern>
<ind:instance datatype="int" operation="greater than or equal">1</ind:instance>
</ind:textfilecontent54_object>
<ind:textfilecontent54_state id="state_sssd_enable_pam_services" version="1">
<ind:subexpression operation="pattern match">^.*pam.*$</ind:subexpression>
</ind:textfilecontent54_state>
</def-group>
|
