Merge pull request #6703 from mildas/rpm_verify_ownership_tests

rpm_verify_ownership test scenarios

linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_ownership/tests/all_ownerships_ok.pass.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+
+# Perform same steps as remediation
+declare -A SETOWNER_RPM_LIST
+FILES_WITH_INCORRECT_OWNERSHIP=($(rpm -Va --nofiledigest | awk '{ if (substr($0,6,1)=="U" || substr($0,7,1)=="G") print $NF }'))
+
+for FILE_PATH in "${FILES_WITH_INCORRECT_OWNERSHIP[@]}"; do
+    RPM_PACKAGES=$(rpm -qf "$FILE_PATH")
+    for pkg in $RPM_PACKAGES; do
+        SETOWNER_RPM_LIST["$pkg"]=1
+    done
+done
+
+for RPM_PACKAGE in "${!SETOWNER_RPM_LIST[@]}"; do
+    rpm --setugids "${RPM_PACKAGE}"
+done

linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_ownership/tests/wrong_group_ownership.fail.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+chown :1 /etc/shadow

linux_os/guide/system/software/integrity/software-integrity/rpm_verification/rpm_verify_ownership/tests/wrong_ownership.fail.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+chown 1 /etc/shadow