[PATCH] Updated shorthand2xccdf.xslt

Michael J. McConachie michael at redhat.com
Tue Oct 2 14:59:16 UTC 2012


Team,

I updated the partition check macro to more properly reflect what we're
trying to accomplish with it.  This is a result of the recent checks,
and test tags being gone through one by one (and the most recent
conversations with Jeff, and Shawn).  

It will now output something similiar to the following example:

------------------------------------------------------
After running the following command verify that /tmp is in fact on its
own partition, or logical volume:

# df -h /tmp

To verify if /tmp lives on its own partition, or volume group simply
review the output of the above command. Often times, people forget to
assign important system filesystems to individual slices while building
the core system. This results in everything "living" under the root
volume group -- which in many enterprise environments is not the
preferred method.

If the directory in question does not reside on it's own partition or
volume group, this is a finding.

Tested on 20120928 by MM.
------------------------------------------------------


More information about the scap-security-guide mailing list