From 2fb341b48768ed2a8ecbffd688eb633e7eb62dee Mon Sep 17 00:00:00 2001 From: Bob Mottram Date: Tue, 29 Nov 2016 19:34:24 +0000 Subject: [PATCH] In most cases the boot loader isn't grub --- src/freedombone-tests | 27 --------------------------- 1 file changed, 27 deletions(-) diff --git a/src/freedombone-tests b/src/freedombone-tests index 94727a83..ca597457 100755 --- a/src/freedombone-tests +++ b/src/freedombone-tests @@ -432,33 +432,6 @@ function test_stig { output "V-38577" $? ${SETLANG} ################ - ##RHEL-06-000065 - ##The system boot loader configuration file(s) must be owned by root. - - ls -l /boot/grub/grub.cfg | awk '{print $3}' | grep "^root$" > /dev/null 2>&1 & - - stig_spinner $! - output "V-38579" $? ${SETLANG} - ################ - - ##RHEL-06-000066 - ##The system boot loader configuration file(s) must be group-owned by root. - - ls -l /boot/grub/grub.cfg | awk '{print $4}' | grep "^root$" > /dev/null 2>&1 & - - stig_spinner $! - output "V-38581" $? ${SETLANG} - ################ - - ##RHEL-06-000067 - ##The system boot loader configuration file(s) must have mode 0600 or less permissive. - - bash $STIG_TESTS_DIR/check-grub-mode.sh > /dev/null 2>&1 & - - stig_spinner $! - output "V-38583" $? ${SETLANG} - ################ - ##RHEL-06-000071 ##The system must allow locking of the console screen in text mode.