1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
|
<def-group oval_version="5.11">
<definition class="compliance" id="sssd_memcache_timeout" version="1">
{{{ oval_metadata("SSSD's memory cache should be configured to set to expire records after 1 day.", rule_title=rule_title) }}}
<criteria operator="OR">
<criterion comment="Check memcache_timeout in /etc/sssd/sssd.conf"
test_ref="test_sssd_memcache_timeout" />
</criteria>
</definition>
<ind:textfilecontent54_test check="all" check_existence="all_exist"
comment="tests the value of memcache_timeout setting in the /etc/sssd/sssd.conf file"
id="test_sssd_memcache_timeout" version="1">
<ind:object object_ref="obj_sssd_memcache_timeout" />
<ind:state state_ref="state_sssd_memcache_timeout" />
</ind:textfilecontent54_test>
<ind:textfilecontent54_object id="obj_sssd_memcache_timeout" version="1">
<ind:filepath>/etc/sssd/sssd.conf</ind:filepath>
<ind:pattern operation="pattern match">^[\s]*\[nss](?:[^\n\[]*\n+)+?[\s]*memcache_timeout[\s]*=[\s]*(\d+)$</ind:pattern>
<ind:instance datatype="int">1</ind:instance>
</ind:textfilecontent54_object>
<ind:textfilecontent54_state comment="value of memcache_timeout setting"
id="state_sssd_memcache_timeout" version="1">
<ind:subexpression datatype="int" operation="less than or equal" var_check="all"
var_ref="var_sssd_memcache_timeout" />
</ind:textfilecontent54_state>
<external_variable comment="memcache_timeout value" datatype="int"
id="var_sssd_memcache_timeout" version="1" />
</def-group>
|
