[PATCH 16/21] Mapped CCI-000143 to partition_for_var_log
Shawn Wells
shawn at redhat.com
Tue Apr 24 19:53:03 UTC 2012
This CCI requires notification of when audit data partition is full. Accomplished by putting /var/log/ on its own partition and then relying on normal system behavior to notify when disk is getting full. Met through partition_for_var_log
---
.../input/system/software/disk_partitioning.xml | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/rhel6/src/input/system/software/disk_partitioning.xml b/rhel6/src/input/system/software/disk_partitioning.xml
index 50dccd0..11c303c 100644
--- a/rhel6/src/input/system/software/disk_partitioning.xml
+++ b/rhel6/src/input/system/software/disk_partitioning.xml
@@ -75,6 +75,7 @@ and other files in <tt>/var/</tt>.
<ident cce="14011-1" />
<oval id="mount_var_log_own_partition" />
<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9" dcid="DCIDexample7.8.9"/>
+<ident cci="CCI-000143" />
</Rule>
<Rule id="partition_for_var_log_audit">
--
1.7.1
--Nq2Wo0NMKNjxTN9z--
More information about the scap-security-guide
mailing list