More outstanding testrefs that should be committed!
---
RHEL6/input/checks/mount_option_tmp_nodev.xml | 11 +++++++----
RHEL6/input/checks/mount_option_tmp_noexec.xml | 14 +++++++++-----
RHEL6/input/checks/mount_option_tmp_nosuid.xml | 13 ++++++++-----
3 files changed, 24 insertions(+), 14 deletions(-)
diff --git a/RHEL6/input/checks/mount_option_tmp_nodev.xml b/RHEL6/input/checks/mount_option_tmp_nodev.xml
index d741d29..fdd2420 100644
--- a/RHEL6/input/checks/mount_option_tmp_nodev.xml
+++ b/RHEL6/input/checks/mount_option_tmp_nodev.xml
@@ -6,14 +6,16 @@
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
<description>Legitimate character and block devices should not exist
- within temporary directories like /tmp. The nodev mount option should
- be specified for /tmp.</description>
+ within temporary directories like /tmp. The nodev mount option should be
+ specified for /tmp.</description>
+ <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="nodev on /tmp" test_ref="test_nodev_tmp" />
</criteria>
</definition>
- <linux:partition_test check="all" check_existence="all_exist" id="test_nodev_tmp" version="1" comment="nodev on /tmp">
+ <linux:partition_test check="all" check_existence="all_exist"
+ id="test_nodev_tmp" version="1" comment="nodev on /tmp">
<linux:object object_ref="object_tmp_nodev_partition" />
<linux:state state_ref="state_tmp_nodev" />
</linux:partition_test>
@@ -21,6 +23,7 @@
<linux:mount_point>/tmp</linux:mount_point>
</linux:partition_object>
<linux:partition_state id="state_tmp_nodev" version="1">
- <linux:mount_options datatype="string" entity_check="at least one" operation="equals">nodev</linux:mount_options>
+ <linux:mount_options datatype="string" entity_check="at least one"
+ operation="equals">nodev</linux:mount_options>
</linux:partition_state>
</def-group>
diff --git a/RHEL6/input/checks/mount_option_tmp_noexec.xml b/RHEL6/input/checks/mount_option_tmp_noexec.xml
index d0593f8..76d8192 100644
--- a/RHEL6/input/checks/mount_option_tmp_noexec.xml
+++ b/RHEL6/input/checks/mount_option_tmp_noexec.xml
@@ -5,15 +5,18 @@
<affected family="unix">
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
- <description>It can be dangerous to allow the execution of binaries
- from world-writable temporary storage directories such as /tmp.
- The noexec mount option prevents binaries from being executed out of /tmp.</description>
+ <description>It can be dangerous to allow the execution of binaries from
+ world-writable temporary storage directories such as /tmp. The noexec
+ mount option prevents binaries from being executed out of
+ /tmp.</description>
+ <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="noexec on /tmp" test_ref="test_noexec_tmp" />
</criteria>
</definition>
- <linux:partition_test check="all" check_existence="all_exist" id="test_noexec_tmp" version="1" comment="noexec on /tmp">
+ <linux:partition_test check="all" check_existence="all_exist"
+ id="test_noexec_tmp" version="1" comment="noexec on /tmp">
<linux:object object_ref="object_tmp_noexec_partition" />
<linux:state state_ref="state_tmp_noexec" />
</linux:partition_test>
@@ -21,6 +24,7 @@
<linux:mount_point>/tmp</linux:mount_point>
</linux:partition_object>
<linux:partition_state id="state_tmp_noexec" version="1">
- <linux:mount_options datatype="string" entity_check="at least one" operation="equals">noexec</linux:mount_options>
+ <linux:mount_options datatype="string" entity_check="at least one"
+ operation="equals">noexec</linux:mount_options>
</linux:partition_state>
</def-group>
diff --git a/RHEL6/input/checks/mount_option_tmp_nosuid.xml b/RHEL6/input/checks/mount_option_tmp_nosuid.xml
index 6477a21..b3d88c9 100644
--- a/RHEL6/input/checks/mount_option_tmp_nosuid.xml
+++ b/RHEL6/input/checks/mount_option_tmp_nosuid.xml
@@ -5,15 +5,17 @@
<affected family="unix">
<platform>Red Hat Enterprise Linux 6</platform>
</affected>
- <description>The nosuid mount option should be set for temporary
- storage partitions such as /tmp. The suid/sgid permissions
- should not be required in these world-writable directories.</description>
+ <description>The nosuid mount option should be set for temporary storage
+ partitions such as /tmp. The suid/sgid permissions should not be required
+ in these world-writable directories.</description>
+ <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
</metadata>
<criteria>
<criterion comment="nosuid on /tmp" test_ref="test_nosuid_tmp" />
</criteria>
</definition>
- <linux:partition_test check="all" check_existence="all_exist" id="test_nosuid_tmp" version="1" comment="nosuid on /tmp">
+ <linux:partition_test check="all" check_existence="all_exist"
+ id="test_nosuid_tmp" version="1" comment="nosuid on /tmp">
<linux:object object_ref="object_tmp_nosuid_partition" />
<linux:state state_ref="state_tmp_nosuid" />
</linux:partition_test>
@@ -21,6 +23,7 @@
<linux:mount_point>/tmp</linux:mount_point>
</linux:partition_object>
<linux:partition_state id="state_tmp_nosuid" version="1">
- <linux:mount_options datatype="string" entity_check="at least one" operation="equals">nosuid</linux:mount_options>
+ <linux:mount_options datatype="string" entity_check="at least one"
+ operation="equals">nosuid</linux:mount_options>
</linux:partition_state>
</def-group>
--
1.7.1
_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide