[PATCH 16/21] Mapped CCI-000143 to partition_for_var_log

Shawn Wells shawn at redhat.com
Tue Apr 24 19:53:03 UTC 2012


This CCI requires notification of when audit data partition is full. Accomplished by putting /var/log/ on its own partition and then relying on normal system behavior to notify when disk is getting full. Met through partition_for_var_log
---
 .../input/system/software/disk_partitioning.xml    |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/system/software/disk_partitioning.xml b/rhel6/src/input/system/software/disk_partitioning.xml
index 50dccd0..11c303c 100644
--- a/rhel6/src/input/system/software/disk_partitioning.xml
+++ b/rhel6/src/input/system/software/disk_partitioning.xml
@@ -75,6 +75,7 @@ and other files in <tt>/var/</tt>.
 <ident cce="14011-1" />
 <oval id="mount_var_log_own_partition" />
 <ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9" dcid="DCIDexample7.8.9"/>
+<ident cci="CCI-000143" />
 </Rule>
 
 <Rule id="partition_for_var_log_audit">
-- 
1.7.1


--Nq2Wo0NMKNjxTN9z--


More information about the scap-security-guide mailing list