diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/oval/shared.xml b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/oval/shared.xml index c2703dc67e9..6b1a8c2f313 100644 --- a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/oval/shared.xml +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/oval/shared.xml @@ -26,13 +26,13 @@ ^/etc/sudoers(\.d/.*)?$ - ^\s*%wheel.*TYPE=(\w+).*$ + ^\s*%\w+.*TYPE=(\w+).*$ 1 ^/etc/sudoers(\.d/.*)?$ - ^\s*%wheel.*ROLE=(\w+).*$ + ^\s*%\w+.*ROLE=(\w+).*$ 1 diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/conflicting_value.fail.sh b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/conflicting_value.fail.sh index 5c8188c78ab..9c131a3c795 100644 --- a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/conflicting_value.fail.sh +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/conflicting_value.fail.sh @@ -1,4 +1,6 @@ -# platform = multi_platform_ol +#!/bin/bash + +# platform = multi_platform_all # packages = sudo # remediation = none diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_multiple_files.pass.sh b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_multiple_files.pass.sh index 400333b019c..4b0ac6fab54 100644 --- a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_multiple_files.pass.sh +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_multiple_files.pass.sh @@ -1,4 +1,6 @@ -# platform = multi_platform_ol +#!/bin/bash + +# platform = multi_platform_all # packages = sudo echo '%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL' >> /etc/sudoers diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_single_file.pass.sh b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_single_file.pass.sh index f1b19ea8660..065022849ca 100644 --- a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_single_file.pass.sh +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/correct_value_single_file.pass.sh @@ -1,4 +1,6 @@ -# platform = multi_platform_ol +#!/bin/bash + +# platform = multi_platform_all # packages = sudo echo '%wheel ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL' >> /etc/sudoers.d/01-complianceascode.conf diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/custom_group_name.pass.sh b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/custom_group_name.pass.sh new file mode 100644 index 00000000000..f94a8c8d834 --- /dev/null +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/custom_group_name.pass.sh @@ -0,0 +1,8 @@ +#!/bin/bash + +# platform = multi_platform_all +# packages = sudo + +group_add sudoers + +echo '%sudoers ALL=(ALL) TYPE=sysadm_t ROLE=sysadm_r ALL' >> /etc/sudoers.d/01-complianceascode.conf diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_role.fail.sh b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_role.fail.sh index 83263e1b54e..a670d560ca0 100644 --- a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_role.fail.sh +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_role.fail.sh @@ -1,4 +1,6 @@ -# platform = multi_platform_ol +#!/bin/bash + +# platform = multi_platform_all # packages = sudo # remediation = none diff --git a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_type.fail.sh b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_type.fail.sh index 15fe7a9ba5b..a3d60b8799f 100644 --- a/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_type.fail.sh +++ b/linux_os/guide/system/selinux/selinux_context_elevation_for_sudo/tests/missing_type.fail.sh @@ -1,4 +1,6 @@ -# platform = multi_platform_ol +#!/bin/bash + +# platform = multi_platform_all # packages = sudo # remediation = none