Agreed, please push these!


On Wed, Sep 18, 2013 at 11:59 AM, Maura Dailey <maura@eclipse.ncsc.mil> wrote:
More outstanding testrefs that should be committed!

---
 RHEL6/input/checks/mount_option_tmp_nodev.xml  |   11 +++++++----
 RHEL6/input/checks/mount_option_tmp_noexec.xml |   14 +++++++++-----
 RHEL6/input/checks/mount_option_tmp_nosuid.xml |   13 ++++++++-----
 3 files changed, 24 insertions(+), 14 deletions(-)

diff --git a/RHEL6/input/checks/mount_option_tmp_nodev.xml b/RHEL6/input/checks/mount_option_tmp_nodev.xml
index d741d29..fdd2420 100644
--- a/RHEL6/input/checks/mount_option_tmp_nodev.xml
+++ b/RHEL6/input/checks/mount_option_tmp_nodev.xml
@@ -6,14 +6,16 @@
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
       <description>Legitimate character and block devices should not exist
-      within temporary directories like /tmp. The nodev mount option should
-      be specified for /tmp.</description>
+      within temporary directories like /tmp. The nodev mount option should be
+      specified for /tmp.</description>
+      <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="nodev on /tmp" test_ref="test_nodev_tmp" />
     </criteria>
   </definition>
-  <linux:partition_test check="all" check_existence="all_exist" id="test_nodev_tmp" version="1" comment="nodev on /tmp">
+  <linux:partition_test check="all" check_existence="all_exist"
+  id="test_nodev_tmp" version="1" comment="nodev on /tmp">
     <linux:object object_ref="object_tmp_nodev_partition" />
     <linux:state state_ref="state_tmp_nodev" />
   </linux:partition_test>
@@ -21,6 +23,7 @@
     <linux:mount_point>/tmp</linux:mount_point>
   </linux:partition_object>
   <linux:partition_state id="state_tmp_nodev" version="1">
-    <linux:mount_options datatype="string" entity_check="at least one" operation="equals">nodev</linux:mount_options>
+    <linux:mount_options datatype="string" entity_check="at least one"
+    operation="equals">nodev</linux:mount_options>
   </linux:partition_state>
 </def-group>
diff --git a/RHEL6/input/checks/mount_option_tmp_noexec.xml b/RHEL6/input/checks/mount_option_tmp_noexec.xml
index d0593f8..76d8192 100644
--- a/RHEL6/input/checks/mount_option_tmp_noexec.xml
+++ b/RHEL6/input/checks/mount_option_tmp_noexec.xml
@@ -5,15 +5,18 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <description>It can be dangerous to allow the execution of binaries
-      from world-writable temporary storage directories such as /tmp.
-      The noexec mount option prevents binaries from being executed out of /tmp.</description>
+      <description>It can be dangerous to allow the execution of binaries from
+      world-writable temporary storage directories such as /tmp. The noexec
+      mount option prevents binaries from being executed out of
+      /tmp.</description>
+      <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="noexec on /tmp" test_ref="test_noexec_tmp" />
     </criteria>
   </definition>
-  <linux:partition_test check="all" check_existence="all_exist" id="test_noexec_tmp" version="1" comment="noexec on /tmp">
+  <linux:partition_test check="all" check_existence="all_exist"
+  id="test_noexec_tmp" version="1" comment="noexec on /tmp">
     <linux:object object_ref="object_tmp_noexec_partition" />
     <linux:state state_ref="state_tmp_noexec" />
   </linux:partition_test>
@@ -21,6 +24,7 @@
     <linux:mount_point>/tmp</linux:mount_point>
   </linux:partition_object>
   <linux:partition_state id="state_tmp_noexec" version="1">
-    <linux:mount_options datatype="string" entity_check="at least one" operation="equals">noexec</linux:mount_options>
+    <linux:mount_options datatype="string" entity_check="at least one"
+    operation="equals">noexec</linux:mount_options>
   </linux:partition_state>
 </def-group>
diff --git a/RHEL6/input/checks/mount_option_tmp_nosuid.xml b/RHEL6/input/checks/mount_option_tmp_nosuid.xml
index 6477a21..b3d88c9 100644
--- a/RHEL6/input/checks/mount_option_tmp_nosuid.xml
+++ b/RHEL6/input/checks/mount_option_tmp_nosuid.xml
@@ -5,15 +5,17 @@
       <affected family="unix">
         <platform>Red Hat Enterprise Linux 6</platform>
       </affected>
-      <description>The nosuid mount option should be set for temporary
-      storage partitions such as /tmp. The suid/sgid permissions
-      should not be required in these world-writable directories.</description>
+      <description>The nosuid mount option should be set for temporary storage
+      partitions such as /tmp. The suid/sgid permissions should not be required
+      in these world-writable directories.</description>
+      <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion comment="nosuid on /tmp" test_ref="test_nosuid_tmp" />
     </criteria>
   </definition>
-  <linux:partition_test check="all" check_existence="all_exist" id="test_nosuid_tmp" version="1" comment="nosuid on /tmp">
+  <linux:partition_test check="all" check_existence="all_exist"
+  id="test_nosuid_tmp" version="1" comment="nosuid on /tmp">
     <linux:object object_ref="object_tmp_nosuid_partition" />
     <linux:state state_ref="state_tmp_nosuid" />
   </linux:partition_test>
@@ -21,6 +23,7 @@
     <linux:mount_point>/tmp</linux:mount_point>
   </linux:partition_object>
   <linux:partition_state id="state_tmp_nosuid" version="1">
-    <linux:mount_options datatype="string" entity_check="at least one" operation="equals">nosuid</linux:mount_options>
+    <linux:mount_options datatype="string" entity_check="at least one"
+    operation="equals">nosuid</linux:mount_options>
   </linux:partition_state>
 </def-group>
--
1.7.1

_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide