2 Replies Latest reply on Oct 19, 2009 8:54 AM by Bill Robinson

    help writing a couple of compliance rules

    Matt Kreger

      1. How do I check to make sure a specific process is running on Linux/Solaris (e.g. RSCD agent)?  I'm probably missing something obvious here.

       

      2. Is there a grammar file out there for rsc/users?  Better yet, is there a way to rewrite this rule to allow me to put nouser in users.local?  I figure remediating users.local will be easier.

       

      (((??TARGET.OS?? = "Linux") OR (??TARGET.OS?? = "Solaris"))

      AND (Configuration File Entry /usr/lib/rsc/users.local//* Must Exist

      AND ((Name is one of ["BLAdmins:*", "System:System"])

      AND (Value1 as String (All OS) = "rw")

      AND (Value2 as String (All OS) = "map=root"))))

       

      OR ((??TARGET.OS?? = "Windows")

      AND (Configuration File Entry /C/WINDOWS/rsc/users.local//* Must Exist

      AND ((Value1 as String (All OS) = "rw")

      AND (Value2 as String (All OS) = "map=??TARGET.ADMIN_ACCOUNT??")

      AND (Name is one of ["BLAdmins:*", "System:System"]))))

       

      Thanks,

      Matt