[PATCH 1/1] Added 800-53 references where missing.

Willy Santos wsantos at redhat.com
Thu Apr 26 18:46:53 UTC 2012


Signed-off-by: Willy Santos <wsantos at redhat.com>
---
  rhel6/src/input/system/permissions/partitions.xml |   14 +++++++-------
  1 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/rhel6/src/input/system/permissions/partitions.xml 
b/rhel6/src/input/system/permissions/partitions.xml
index 239389f..5fdd7ad 100644
--- a/rhel6/src/input/system/permissions/partitions.xml
+++ b/rhel6/src/input/system/permissions/partitions.xml
@@ -86,7 +86,7 @@ mount option should be specified for 
<tt>/tmp</tt>.</description>
  located on the root partition. The only exception to this is chroot 
jails.</rationale>
  <ident cce="14412-1" />
  <oval id="mount_option_tmp_nodev" />
-<ref nist="TODO"/>
+<ref nist="CM-7, MP-2"/>
  </Rule>
   <Rule id="mount_option_tmp_noexec">
@@ -99,7 +99,7 @@ out of <tt>/tmp</tt>.</description>
  such as /tmp can expose the system to potential compromise.</rationale>
  <ident cce="14927-8" />
  <oval id="mount_option_tmp_noexec" />
-<ref nist="TODO"/>
+<ref nist="CM-7, MP-2"/>
  </Rule>
   <Rule id="mount_option_tmp_nosuid">
@@ -111,7 +111,7 @@ should not be required in these world-writeable 
directories.</description>
  should not be able to execute suid or sgid binaries from temporary 
storage partitions.</rationale>
  <ident cce="14940-1" />
  <oval id="mount_option_tmp_nosuid" />
-<ref nist="TODO"/>
+<ref nist="CM-7, MP-2"/>
  </Rule>
   <Rule id="mount_option_dev_shm_nodev">
@@ -123,7 +123,7 @@ mount option should specified for 
<tt>/dev/shm</tt>.</description>
  located on the root partition. The only exception to this is chroot 
jails.</rationale>
  <ident cce="15007-8" />
  <oval id="mount_option_dev_shm_nodev" />
-<ref nist="TODO"/>
+<ref nist="CM-7, MP-2"/>
  </Rule>
   <Rule id="mount_option_dev_shm_noexec">
@@ -136,7 +136,7 @@ out of <tt>/dev/shm</tt>.</description>
  such as /dev/shm can expose the system to potential 
compromise.</rationale>
  <ident cce="14703-3" />
  <oval id="mount_option_dev_shm_noexec" />
-<ref nist="TODO"/>
+<ref nist="CM-7, MP-2"/>
  </Rule>
   <Rule id="mount_option_dev_shm_nosuid">
@@ -148,7 +148,7 @@ should not be required in these world-writeable 
directories.</description>
  should not be able to execute suid or sgid binaries from temporary 
storage partitions.</rationale>
  <ident cce="14306-5" />
  <oval id="mount_option_dev_shm_nosuid" />
-<ref nist="TODO"/>
+<ref nist="CM-7, MP-2"/>
  </Rule>
   <Rule id="mount_option_var_tmp_bind_var">
@@ -165,7 +165,7 @@ necessary to meet requirements, the storage location 
/var/tmp should be bind mou
  /tmp and thus share the same protections.</rationale>
  <ident cce="14584-7" />
  <oval id="mount_option_var_tmp_bind" />
-<ref nist="TODO"/>
+<ref nist="CM-6"/>
  </Rule>
   </Group>
-- 
1.7.7.6



More information about the scap-security-guide mailing list