Fix ALL_MATCH_ANY_ORDER

mindedsecurity · Dec 12, 2023 · 54355d6 · 54355d6
1 parent b88fc11
commit 54355d6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/configs/defs/cos.textproto b/configs/defs/cos.textproto
@@ -4350,7 +4350,7 @@ benchmark_configs: {
     "   file_checks:{"
     "     files_to_check:{single_file:{path:\"/usr/share/cloud/ip6tables-setup\"}}"
     "     content_entry:{"
-    "         match_type: ALL_MATCH_ANY_ORDER"
+    "         match_type: ALL_MATCH_STRICT_ORDER"
     "         match_criteria: {"
     "           filter_regex: \"ip6tables\\\\s+-[A-Z]\\\\s+INPUT\\\\s+-i\\\\s+lo\\\\s+-j\\\\s+[a-zA-Z]+\\\\s+.*\""
     "           expected_regex: \"ip6tables\\\\s+-(A|I)\\\\s+INPUT\\\\s+-i\\\\s+lo\\\\s+-j\\\\s+ACCEPT\\\\s+.*\""
@@ -4527,7 +4527,7 @@ benchmark_configs: {
     "   file_checks:{"
     "     files_to_check:{single_file:{path:\"/usr/share/cloud/iptables-setup\"}}"
     "     content_entry:{"
-    "         match_type: ALL_MATCH_ANY_ORDER"
+    "         match_type: ALL_MATCH_STRICT_ORDER"
     "         match_criteria: {"
     "           filter_regex: \"iptables\\\\s+-[A-Z]\\\\s+INPUT\\\\s+-i\\\\s+lo\\\\s+-j\\\\s+[a-zA-Z]+\\\\s+.*\""
     "           expected_regex: \"iptables\\\\s+-(A|I)\\\\s+INPUT\\\\s+-i\\\\s+lo\\\\s+-j\\\\s+ACCEPT\\\\s+.*\""