diff --git a/controls/4_1_configure_system_accounting_auditd.rb b/controls/4_1_configure_system_accounting_auditd.rb index 078d0ec..9953526 100644 --- a/controls/4_1_configure_system_accounting_auditd.rb +++ b/controls/4_1_configure_system_accounting_auditd.rb @@ -96,7 +96,7 @@ only_if { cis_level == 2 } describe.one do - %w(/boot/grub/grub.conf /boot/grub/grub.cfg /boot/grub/menu.lst /boot/boot/grub/grub.conf /boot/boot/grub/grub.cfg /boot/boot/grub/menu.lst /boot/grub2/grub.cfg).each do |f| + %w(/boot/grub/grub.conf /boot/grub/grub.cfg /boot/grub/menu.lst /boot/boot/grub/grub.conf /boot/boot/grub/grub.cfg /boot/boot/grub/menu.lst /boot/grub2/grub.cfg /usr/share/oem/grub.cfg).each do |f| describe file(f) do its(:content) { should match(/audit=1/) } end diff --git a/controls/6_1_system_file_permissions.rb b/controls/6_1_system_file_permissions.rb index ff33b20..251dcf5 100644 --- a/controls/6_1_system_file_permissions.rb +++ b/controls/6_1_system_file_permissions.rb @@ -181,10 +181,8 @@ it { should be_readable.by 'owner' } it { should be_writable.by 'owner' } it { should_not be_executable.by 'owner' } - it { should_not be_readable.by 'group' } it { should_not be_writable.by 'group' } it { should_not be_executable.by 'group' } - it { should_not be_readable.by 'other' } it { should_not be_writable.by 'other' } it { should_not be_executable.by 'other' } its(:uid) { should cmp 0 }