From shawn at redhat.com Thu Aug 20 11:35:48 2015 Content-Type: multipart/mixed; boundary="===============0694258420319069790==" MIME-Version: 1.0 From: Shawn Wells To: scap-security-guide at lists.fedorahosted.org Subject: Re: [PATCH] correct several STIG/SSG mappings Date: Mon, 18 Nov 2013 16:47:01 -0700 Message-ID: <528AA6F5.9060901@redhat.com> In-Reply-To: 294970648F72F5468D5C8718139CA88005AA7F71@umechphi.easf.csd.disa.mil --===============0694258420319069790== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable On 11/15/13, 7:06 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote: >> >This is the only thing that caught my eye. >> > >> >By moving to nonselected, will it no longer be required to switch into >> >single user mode when /var/log/audit fills up? >> > >> > From a code perspective, ack. > Pushed. > > As it happens, CCI-001343 (derived from 800-53r3 AU-5 (4)) is not selecte= d in CNSSI 1253. The patch below backs out the "nonselected" updates. I h= ope to have a better way to handle non-selected Rules early next week. > > > Thanks, > Leland > -- > Leland Steinke, Security+ > DISA FSO Technical Support Contractor > tapestry technologies, Inc > 717-267-5797 (DSN 570) > leland.j.steinke.ctr(a)mail.mil (gov't) > lsteinke(a)tapestrytech.com (com'l) > > --- > RHEL6/input/auxiliary/stig_overlay.xml | 6 +++--- > 1 files changed, 3 insertions(+), 3 deletions(-) > > diff --git a/RHEL6/input/auxiliary/stig_overlay.xml b/RHEL6/input/auxilia= ry/stig_overlay.xml > index 8e89373..b2c7809 100644 > --- a/RHEL6/input/auxiliary/stig_overlay.xml > +++ b/RHEL6/input/auxiliary/stig_overlay.xml > @@ -351,7 +351,7 @@ > > The system must rotate audit log files that reach the maximum = file size. > > - > + > The audit system must switch the system to single-user mode wh= en available audit storage volume becomes dangerously low. > > > @@ -534,7 +534,7 @@ > > Mail relaying must be restricted. > > - > + > The operating system must uniquely identify and authenticate a= n organization defined list of specific devices and/or types of devices bef= ore establishing a connection. > > > @@ -564,7 +564,7 @@ > > The atd service must be disabled. > > - > + > Automated file system mounting tools must not be enabled unles= s needed. > > > -- = Would it be simpler to remove the associated XCCDF rules from the STIG = profile? --===============0694258420319069790==--