<def-group>
  <definition class="compliance" id="accounts_have_homedir_login_defs" version="1">
    {{{ oval_metadata("CREATE_HOME should be enabled") }}}
    <criteria operator="AND">
      <criterion comment="Check CREATE_HOME in /etc/login.defs" test_ref="test_accounts_have_homedir_login_defs" />
    </criteria>
  </definition>

  <ind:textfilecontent54_test check="all" check_existence="all_exist"
  comment="Check value of CREATE_HOME in /etc/login.defs"
  id="test_accounts_have_homedir_login_defs" version="1">
    <ind:object object_ref="obj_accounts_have_homedir_login_defs" />
  </ind:textfilecontent54_test>

  <ind:textfilecontent54_object id="obj_accounts_have_homedir_login_defs" version="2">
    <ind:filepath>/etc/login.defs</ind:filepath>
    <ind:pattern operation="pattern match">^[\s]*(?i)CREATE_HOME(?-i)[\s]+yes[\s]*(?:#.*)?$</ind:pattern>
    <ind:instance datatype="int">1</ind:instance>
  </ind:textfilecontent54_object>

</def-group>
