[PATCH 15/26] Mapped CCI-001250 to gconf_gnome_disable_automount.

Shawn Wells shawn at redhat.com
Fri Jun 29 22:54:41 UTC 2012


On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-001250 requires not allowing users to introduce removable media. The referenced rule disables the automatic mounting of media in Gnome.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/system/permissions/mounting.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/system/permissions/mounting.xml b/rhel6/src/input/system/permissions/mounting.xml
> index 5e10374..a2fec04 100644
> --- a/rhel6/src/input/system/permissions/mounting.xml
> +++ b/rhel6/src/input/system/permissions/mounting.xml
> @@ -162,7 +162,7 @@ DVDs.
>   </rationale>
>   <ident cce="4231-7" />
>   <oval id="gconf_gnome_disable_automount" />
> -<ref nist="CM-6, CM-7" />
> +<ref nist="CM-6, CM-7" disa="1250" />
>   </Rule>
>   
>   <Rule id="disable_module_cramfs">

Ack

-- 
Shawn Wells
Technical Director,
U.S. Intelligence Programs
(e) shawn at redhat.com
(c) 443.534.0130



More information about the scap-security-guide mailing list