This schema was originally developed by The MITRE Corporation. The CybOX XML Schema implementation is maintained by The MITRE Corporation and developed by the open CybOX Community. For more information, including how to get involved in the effort and how to submit change requests, please visit the CybOX website at http://cybox.mitre.org. Unix_File_Object 2.1 01/22/2014 The following specifies the fields and types that compose this defined CybOX Object type. Each defined object is an extension of the abstract ObjectPropertiesType, defined in CybOX Common. For more information on this extension mechanism, please see the CybOX Specification. This document is intended for developers and assumes some familiarity with XML. Copyright (c) 2012-2014, The MITRE Corporation. All rights reserved. The contents of this file are subject to the terms of the CybOX License located at http://cybox.mitre.org/about/termsofuse.html. See the CybOX License for the specific language governing permissions and limitations for use of this schema. When distributing copies of the CybOX Schema, this license header must be included. The Unix_File object is intended to characterize Unix files. The UnixFileObjectType type is intended to characterize Unix files. The Group_Owner field specifies the name of the group which owns the file. The INode field specifies the inode, or index node, value of the file. Specifies file type using the UnixFileTypeEnum enumeration. The UnixFilePermissionsType type specifies the specific permissions used by the Unix family of operating systems. The suid field specifies whether or not the file may be exectued with the privileges of the file's owner. The sgid field specifies whether or not the file may be executed with the privileges of the file's group owner. The uread field specifies whether or not the owner of the file can read its contents. The uwrite field specifies whether or not the owner of the file can write to it. The uexec field specifies whether or not the owner of the file can execute it. The gread field specifies whether or not the group owner of the file can read its contents. The gwrite field specifies whether or not the group owner of the file can write to it. The gexec field specifies whether or not the group owner of the file can execute it. The oread field specifies whether or not all other users can read the contents of the file. The owrite field specifies whether or not all other users can write to the file. The oexec field specifies whether or not all other users can execute the file. UnixFileType specifies Unix file types, via a union of the UnixFileTypeEnum type and the atomic xs:string type. Its base type is the CybOX Core BaseObjectPropertyType, for permitting complex (i.e. regular-expression based) specifications. This attribute is optional and specifies the expected type for the value of the specified property. The UnixFileTypeEnum type is an enumeration of file types used by the Unix family of operating systems. These file types can be determined via the output of the ls and stat commands. Specifies a regular file, denoted in UNIX by the first dash (-) in a file with permissions -rw-r--r--. Specifies a directory, denoted in UNIX by the d in a file with permissions drw-r--r--. Specifies a socket, denoted in UNIX by the s in a file with permissions srw-r--r--. Specifies a symbolic link, denoted in UNIX by the l in a file with permissions lrw-r--r--. Specifies a block device, such as /dev/sda, denoted in UNIX by the b in a file with permissions brw-rw----. Specifies a character device, such as /dev/null, denoted in UNIX by the c in a file with permissions crw-------.