Regular Expression Matching

Basic regex pattern matching can be used in signature content. When regex is detected by ConfigOS remediation of the rule will no longer be possible.

^ marking the beginning of a line.

$ marking the end of a line.

\s* to ignore any number of whitespaces.

[0-9/a-z] matching various letters or numbers as indicated.

| as an OR argument, ex: [1|2|3] would match 1, 2, or 3.

Please note that not all regular expression syntax can or will be supported by ConfigOS.

For more information and tutorials on regex please visit http://regular-expressions.info

Example which examines /etc/redhat-release and will pass any version of RHEL between 8.6 and 8.10:

<Group>
  <GroupId>V-230221</GroupId>
  <GroupTitle>SRG-OS-000480-GPOS-00227</GroupTitle>
  <RuleId>SV-230221r858734_rule</RuleId>
  <Severity>CAT I</Severity>
  <RuleVersion>RHEL-08-010000</RuleVersion>
  <RuleTitle>RHEL 8 must be a vendor-supported release.</RuleTitle>
  <Where>/etc/redhat-release</Where>
  <Applied>^Red Hat Enterprise Linux release</Applied>
  <Type>Configuration</Type>
  <Value>[(?:8\.[5-9]|8\.10)],</Value>
  <Ignore>case,space,import</Ignore>
  <IgnoreReason>Current End of Extended Update Support for RHEL 8.1 is 30 November 2021.
  Current End of Extended Update Support for RHEL 8.2 is 30 April 2022.
  Current End of Extended Update Support for RHEL 8.4 is 30 April 2023.
  Current End of Maintenance Support for RHEL 8.5 is 30 April 2022.
  Current End of Extended Update Support for RHEL 8.6 is 30 April 2024.
  Current End of Maintenance Support for RHEL 8.7 is 30 April 2023.
  Current End of Extended Update Support for RHEL 8.8 is 30 April 2025.
  Current End of Maintenance Support for RHEL 8.9 is 30 April 2024.
  Current End of Maintenance Support for RHEL 8.10 is 31 May 2029.
  Please change the value to reflect your release of Red Hat</IgnoreReason>
</Group>