Control type designed to check whether files exist and optionally remove them.
[!exists],[remove]
Will delete files detected on remediation. Please check the scan value before proceeding with remediate and ensure you have backed up all relevant data.
<Group>
<GroupId>V-230238</GroupId>
<GroupTitle>SRG-OS-000120-GPOS-00061</GroupTitle>
<RuleId>SV-230238r646862_rule</RuleId>
<Severity>CAT II</Severity>
<RuleVersion>RHEL-08-010161</RuleVersion>
<RuleTitle>RHEL 8 must prevent system daemons from using Kerberos for authentication.</RuleTitle>
<Where>/etc</Where>
<Applied>*.keytab</Applied>
<Type>File</Type>
<Value>[!exists],[remove]</Value>
<Ignore></Ignore>
<IgnoreReason></IgnoreReason>
</Group>
Exists
Checking to see if a file exists and creates a 0 byte file in the specified location.
<Group>
<GroupId>V-230530 Part 1 of 3</GroupId>
<GroupTitle>SRG-OS-000480-GPOS-00227</GroupTitle>
<RuleId>SV-230530r646883_rule</RuleId>
<Severity>CAT I</Severity>
<RuleVersion>RHEL-08-040171</RuleVersion>
<RuleTitle>The x86 Ctrl-Alt-Delete key sequence in RHEL 8 must be disabled if a graphical user interface is installed.</RuleTitle>
<Where>/etc/dconf/db/local.d</Where>
<Applied>00-disable-CAD</Applied>
<Type>File</Type>
<Value>exists</Value>
<Ignore>case,space</Ignore>
<IgnoreReason></IgnoreReason>
</Group>
