Unix Configuration Custom Items

A custom item is a complete check defined on the basis of the keywords defined above. This section contains a list of custom items. Each check starts with a “<custom_item>” tag and ends with “</custom_item>”. Enclosed within the tags are lists of one or more keywords that are interpreted by the compliance check parser to perform the checks.

Tip: Custom audit checks may use “</custom_item>” and “</item>” interchangeably for the closing tag.

This section includes the following information:

• AUDIT_XML
• AUDIT_ALLOWED_OPEN_PORTS
• AUDIT_DENIED_OPEN_PORTS
• AUDIT_PROCESS_ON_PORT
• BANNER_CHECK
• CHKCONFIG
• CMD_EXEC
• FILE_CHECK
• FILE_CHECK_NOT
• FILE_CONTENT_CHECK
• FILE_CONTENT_CHECK_NOT
• GRAMMAR_CHECK
• MACOSX_DEFAULTS_READ
• MACOSX_OSASCRIPT
• PKG_CHECK
• PROCESS_CHECK
• RPM_CHECK
• SVC_PROP
• XINETD_SVC