Browse OVAL Objects OVAL Sources By Release DatesOVAL Definitions Windows Compliance Inventory Patches Vulnerabilities Unix/Linux Compliance Inventory Patches Vulnerabilities Red Hat Advisories Suse Linux Advisories IOS PixOSOVAL Classes Compliance Inventory Miscellaneous Patch VulnerabilityOther Feedback About & Contact |
See also:
OVAL Data Types
OVAL Terms
Windows
How to view effective permissions on files and folders
Alternative-1 : Using Windows Explorer
Source:
http://technet.microsoft.com/en-us/library/cc758822(WS.10).aspx
To view effective permissions on files and foldersAlternative-2 : Use AccessChk v5.0 By Mark Russinovich Source: http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx As a part of ensuring that they've created a secure environment Windows administrators often need to know what kind of accesses specific users or groups have to resources including files, directories, Registry keys, global objects and Windows services. AccessChk quickly answers these questions with an intuitive interface and output.Alternative-3 : Use AccessEnum v1.32 By Bryce Cogswell Source: http://technet.microsoft.com/en-us/sysinternals/bb664922.aspx While the flexible security model employed by Windows NT-based systems allows full control over security and file permissions, managing permissions so that users have appropriate access to files, directories and Registry keys can be difficult. There's no built-in way to quickly view user accesses to a tree of directories or keys. AccessEnum gives you a full view of your file system and Registry security settings in seconds, making it the ideal tool for helping you for security holes and lock down permissions where necessary.
How to query registry object value
You can use the reg command.
For example you can use this command to view the processor architecture :
reg query "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v "PROCESSOR_ARCHITECTURE"
How to view file information like version etc
Alternative-1 : Using Windows Explorer
1.Open Windows Explorer, and then locate the file for which you would like to view details.Alternative-2 : Sigcheck v1.7 By Mark Russinovich Source: http://technet.microsoft.com/en-us/sysinternals/bb897441.aspx Verify that images are digitally signed and dump version information with this simple command-line utility.Alternative-3 : GetFileVersionInfo See GetFileVersionInfo function http://msdn.microsoft.com/en-us/library/ms647003(v=VS.85).aspx Linux
How to view RPM package information?
To query an installed RPM package, use the command
rpm -q packagename
To view package information, use the command rpm -qi packagename
To view list of files in the package, use the command rpm -ql packagename
Solaris
SMF: Service Management Facility
FMRI: Fault Management Resource Identifier AIX
How to get version, fileset and maintenance level information
Please see http://www-01.ibm.com/support/docview.wss?uid=swg21079099
What is APAR?
APAR: Authorized Program Analysis Report [IBM]- description and history of a possible defect and its resolution.
Each APAR is given a unique number. If it is confirmed that a defect does exist,
and it is fixed, the fix is called a PTF, "Program Temporary Fix."
http://techsupport.services.ibm.com/guides/pseries/terms.shtml
HP UX
The swlist Command
Please see
http://docs.hp.com/en/B2355-90107/ch05s01.html
Verifying the HP-UX Install or Update
Please see
http://docs.hp.com/en/5187-2725/ch07s01.html
OVAL Objects
References To Objects [[.. ${{ ... }}]] syntax
References to values of objects are displayed with a [[attributename of ${{class:objectname:objectvalue}}]] syntax.
For example : [[value of ${{windows:registry_object:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion : SystemRoot}}]]\Microsoft.NET\Framework\v2.0.50727\System.web.dll Red part in the sample value means that you should get value of HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion : SystemRoot
registry key and then append \Microsoft.NET\Framework\v2.0.50727\System.web.dll to that value.For example if system root is c:\windows\ then the final expanded value would be
c:\windows\Microsoft.NET\Framework\v2.0.50727\System.web.dll
|
OVAL Definitions By Referenced ObjectsWindows |