[PATCH 1/5] Corrected rule mapping for CCI-143.

Willy Santos wsantos at redhat.com
Wed Jul 25 21:36:46 UTC 2012


Removed mapping from partition_for_var_log and mapped to configure_auditd_admin_space_left_action and configure_auditd_space_left_action.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 RHEL6/input/system/auditing.xml                   |    4 ++--
 RHEL6/input/system/software/disk_partitioning.xml |    2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 56936cf..e679cb1 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -274,7 +274,7 @@ Setting this to <tt>email</tt> is recommended over the default
 <rationale>Notifying administrators of an impending disk space problem may
 allow them to take corrective action prior to any disruption.</rationale>
 <oval id="auditd_data_retention_space_left_action" value="var_auditd_space_left_action"/>
-<ref disa="140,144" />
+<ref disa="140,143,144" />
 </Rule>
 
 
@@ -298,7 +298,7 @@ audit records. If a separate partition or logical volume of adequate size
 is used, running low on space for audit records should never occur.
 </rationale>
 <oval id="auditd_data_retention_admin_space_left_action" value="var_auditd_admin_space_left_action" />
-<ref disa="140,144" />
+<ref disa="140,143,144" />
 </Rule>
 
 
diff --git a/RHEL6/input/system/software/disk_partitioning.xml b/RHEL6/input/system/software/disk_partitioning.xml
index 5df191b..4218a33 100644
--- a/RHEL6/input/system/software/disk_partitioning.xml
+++ b/RHEL6/input/system/software/disk_partitioning.xml
@@ -74,7 +74,7 @@ and other files in <tt>/var/</tt>.
 </rationale>
 <ident cce="14011-1" />
 <oval id="mount_var_log_own_partition" />
-<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9" disa="143"/>
+<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9" disa=""/>
 </Rule>
 
 <Rule id="partition_for_var_log_audit">
-- 
1.7.7.6



More information about the scap-security-guide mailing list