Skip to content
#

inspec-profile

Star

Here are 21 public repositories matching this topic...

Sort: Best match
Sort options
Best match Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

mitre / apache-tomcat-7-cis-baseline

Star 2
Open

File mode checks should also pass if mode is more restrictive

asturtevant
asturtevant commented Nov 16, 2018

Several controls are performing a mode check on files using

its('mode') { should cmp '0750' }

This should to changed to cmp <= instead of just cmp, so that the control will still pass if the mode set is more restrictive.

The following controls are affected:

  • M-4.1
  • M-4.11
  • M-4.12
  • M-4.13
  • M-4.14
  • M-4.2
  • M-4.3
  • M-4.4
  • M-4.5
  • M-4.6
  • M-4.7
  • M-4.8
  • M-4.9
Read more
good first issue chore

Improve this page

Add a description, image, and links to the inspec-profile topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the inspec-profile topic, visit your repo's landing page and select "manage topics."

Learn more