[PATCH 15/26] Mapped CCI-001250 to gconf_gnome_disable_automount.
Shawn Wells
shawn at redhat.com
Fri Jun 29 22:54:41 UTC 2012
On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-001250 requires not allowing users to introduce removable media. The referenced rule disables the automatic mounting of media in Gnome.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
> rhel6/src/input/system/permissions/mounting.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/system/permissions/mounting.xml b/rhel6/src/input/system/permissions/mounting.xml
> index 5e10374..a2fec04 100644
> --- a/rhel6/src/input/system/permissions/mounting.xml
> +++ b/rhel6/src/input/system/permissions/mounting.xml
> @@ -162,7 +162,7 @@ DVDs.
> </rationale>
> <ident cce="4231-7" />
> <oval id="gconf_gnome_disable_automount" />
> -<ref nist="CM-6, CM-7" />
> +<ref nist="CM-6, CM-7" disa="1250" />
> </Rule>
>
> <Rule id="disable_module_cramfs">
Ack
--
Shawn Wells
Technical Director,
U.S. Intelligence Programs
(e) shawn at redhat.com
(c) 443.534.0130
More information about the scap-security-guide
mailing list