ComplianceAsCode / ComplianceAsCode/content

template issue: file_groupowner fails tests of itself

Open
#12,131 2 comments 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

The rule `root_permissions_syslibrary_files` uses template `file_groupowner`. During automatus.py rule-based test, the template failed the missing_file_test.pass at initial stage.

These are two causes:
- /lib/dbus-1.0/dbus-daemon-launch-helper has GID 106
- /lib64 is a symbolic link and cause oval to throw: `items were missing:
Object oval:ssg-object_file_groupownerroot_permissions_syslibrary_files_1:obj:1 of type file_object`

Below is the oval result:

[root_permissions_syslibrary_files-missing_file_test.pass.sh-initial.verbose.log](https://github.com/user-attachments/files/16105676/root_permissions_syslibrary_files-missing_file_test.pass.sh-initial.verbose.log)

#### SCAP Security Guide Version:

OpenSCAP command line tool (oscap) 1.2.17

#### Operating System Version:

Ubuntu 22.04 (building env)
Ubuntu 20.04 (testing env)

#### Steps to Reproduce:

1. Build Ubuntu 20.04
2. Use the rule-based automatus.py to test `root_permissions_syslibrary_files`

#### Actual Results:

#### Expected Results:

#### Additional Information/Debugging Steps:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.