Skip to content

Commit 2089613

Browse files
committed
Remove explicit group read check for the shadowfiles, should be 0640 or better
Signed-off-by: Brian Dwyer <[email protected]>
1 parent 649edd4 commit 2089613

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

controls/6_1_system_file_permissions.rb

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,6 @@
8686
it { should be_readable.by 'owner' }
8787
it { should be_writable.by 'owner' }
8888
it { should_not be_executable.by 'owner' }
89-
it { should be_readable.by 'group' }
9089
it { should_not be_writable.by 'group' }
9190
it { should_not be_executable.by 'group' }
9291
it { should_not be_readable.by 'other' }
@@ -153,7 +152,6 @@
153152
it { should be_readable.by 'owner' }
154153
it { should be_writable.by 'owner' }
155154
it { should_not be_executable.by 'owner' }
156-
it { should be_readable.by 'group' }
157155
it { should_not be_writable.by 'group' }
158156
it { should_not be_executable.by 'group' }
159157
it { should_not be_readable.by 'other' }
@@ -206,7 +204,6 @@
206204
it { should be_readable.by 'owner' }
207205
it { should be_writable.by 'owner' }
208206
it { should_not be_executable.by 'owner' }
209-
it { should be_readable.by 'group' }
210207
it { should_not be_writable.by 'group' }
211208
it { should_not be_executable.by 'group' }
212209
it { should_not be_readable.by 'other' }
@@ -260,7 +257,6 @@
260257
it { should be_readable.by 'owner' }
261258
it { should be_writable.by 'owner' }
262259
it { should_not be_executable.by 'owner' }
263-
it { should be_readable.by 'group' }
264260
it { should_not be_writable.by 'group' }
265261
it { should_not be_executable.by 'group' }
266262
it { should_not be_readable.by 'other' }

0 commit comments

Comments
 (0)