[PATCH 06/14] Mapped CCI-000087 to mountopt_noexec_on_removable_partitions
Willy Santos
wsantos at redhat.com
Fri May 4 13:51:02 UTC 2012
CCI-000087 requires disabling execution of code on mobile devices, mountopt_noexec_on_removable_partitions meets this requirement.
Signed-off-by: Willy Santos <wsantos at redhat.com>
---
rhel6/src/input/system/permissions/partitions.xml | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/permissions/partitions.xml b/rhel6/src/input/system/permissions/partitions.xml
index 5fdd7ad..87e78df 100644
--- a/rhel6/src/input/system/permissions/partitions.xml
+++ b/rhel6/src/input/system/permissions/partitions.xml
@@ -59,7 +59,7 @@ certain types of worms or malicious code.</description>
the system to potential compromise.</rationale>
<ident cce="4275-4" />
<oval id="mount_option_noexec_removable_partitions" value="var_removable_partition" />
-<ref nist="CM-7, MP-2"/>
+<ref nist="CM-7, MP-2" disa="87" />
</Rule>
<Rule id="mountopt_nosuid_on_removable_partitions">
--
1.7.7.6
More information about the scap-security-guide
mailing list