OVALFileLinker from SCAP Security Guide ssg: [0, 1, 80], python: 3.10.12 5.11.2 2025-11-24T17:59:05 Verify ownership of log files Ubuntu 22.04 Group owner of /var/log/* should be root or adm. /etc/group ^adm:\w+:(\w+):.* 1 /var/log .* oval:ssg-file_groupownerships_var_log_exclude_symlinks:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_apt:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_auth_log:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_bwtmp:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_cloudinit:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_gdm:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_journal:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_landscape:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_lastlog:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_localmessages:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_messages:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_secure:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_sssd:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_syslog:ste:1 oval:ssg-file_groupownerships_var_log_exclude_files_waagent:ste:1 /etc/group 1 /etc/passwd 1 /etc/passwd ^[^:]+:[^:]*:(\d\d?\d?):.*$ 1 symbolic link 0 ^/var/log/apt/.* ^/var/log/landscape/.* auth.log ^[bw]tmp((\.|-).*)?$ ^cloud-init\.log.* ^/var/log/(gdm|gdm3)/.*$ ^.*\.journal.*$ ^lastlog.*$ ^localmessages.*$ messages ^secure.*$ ^/var/log/sssd/.*$ syslog ^waagent\.log.*$ ^[^:]+:[^:]*:( ):$ ^[^:]*:[^:]*: :(\d+):.*$