At Jeff's request, I tested the following changes. It appears that the contents of the pattern check are not required and break OVAL validation. - Maura Dailey Signed-off-by: Maura Dailey <maura(a)eclipse.ncsc.mil&gt; --- RHEL6/input/checks/banner_etc_issue.xml | 10 +++++----- 1 files changed, 5 insertions(+), 5 deletions(-) diff --git a/RHEL6/input/checks/banner_etc_issue.xml b/RHEL6/input/checks/banner_etc_issue.xml index 346bfab..e13bd3a 100644 --- a/RHEL6/input/checks/banner_etc_issue.xml +++ b/RHEL6/input/checks/banner_etc_issue.xml @@ -8,15 +8,15 @@ <description>The system login banner text should be set correctly.</description> </metadata> <criteria> - <criterion comment="/etc/issue is set appropriately" test_ref="test_20102" /> + <criterion comment="/etc/issue is set appropriately" test_ref="test_banner_etc_issue" /> </criteria> </definition> - <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="correct banner in /etc/issue" id="test_20102" version="1"> - <ind:object object_ref="obj_20102" /> + <ind:textfilecontent54_test check="all" check_existence="all_exist" comment="correct banner in /etc/issue" id="test_banner_etc_issue" version="1"> + <ind:object object_ref="object_banner_etc_issue" /> </ind:textfilecontent54_test> - <ind:textfilecontent54_object id="obj_20102" version="1"> + <ind:textfilecontent54_object id="object_banner_etc_issue" version="1"> <ind:filepath>/etc/issue</ind:filepath> - <ind:pattern var_ref="login_banner_text" operation="pattern match">^.*(.+).*$</ind:pattern> + <ind:pattern var_ref="login_banner_text" operation="pattern match" /> <ind:instance datatype="int" operation="greater than or equal">1</ind:instance> </ind:textfilecontent54_object> <external_variable comment="warning banner text variable" datatype="string" id="login_banner_text" version="1" />