[PATCH 07/25] Mapped CCI-001250 to service_autofs_disabled.

Willy Santos wsantos at redhat.com
Wed Jun 27 22:18:17 UTC 2012


CCI-001250 requires the OS to not allow users to introduce removable media into the information system. Disabling the Automounter prevents users from automatically mounting filesystems in removable media such as CD-ROMs.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/system/permissions/mounting.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/permissions/mounting.xml b/rhel6/src/input/system/permissions/mounting.xml
index e77e404..5e10374 100644
--- a/rhel6/src/input/system/permissions/mounting.xml
+++ b/rhel6/src/input/system/permissions/mounting.xml
@@ -133,7 +133,7 @@ should be explicitly listed in /etc/fstab by and administrator. New filesystems
 not be arbitrarily introduced via the automounter.</rationale>
 <ident cce="4072-5" />
 <oval id="service_autofs_disabled" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="1250" />
 </Rule>
 
 <Rule id="gconf_gnome_disable_automount">
-- 
1.7.7.6



More information about the scap-security-guide mailing list