[PATCH 06/14] Mapped CCI-000087 to mountopt_noexec_on_removable_partitions

Willy Santos wsantos at redhat.com
Fri May 4 13:51:02 UTC 2012


CCI-000087 requires disabling execution of code on mobile devices, mountopt_noexec_on_removable_partitions meets this requirement.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/system/permissions/partitions.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/permissions/partitions.xml b/rhel6/src/input/system/permissions/partitions.xml
index 5fdd7ad..87e78df 100644
--- a/rhel6/src/input/system/permissions/partitions.xml
+++ b/rhel6/src/input/system/permissions/partitions.xml
@@ -59,7 +59,7 @@ certain types of worms or malicious code.</description>
 the system to potential compromise.</rationale>
 <ident cce="4275-4" />
 <oval id="mount_option_noexec_removable_partitions" value="var_removable_partition" />
-<ref nist="CM-7, MP-2"/>
+<ref nist="CM-7, MP-2" disa="87" />
 </Rule>
 
 <Rule id="mountopt_nosuid_on_removable_partitions">
-- 
1.7.7.6



More information about the scap-security-guide mailing list