[PATCH 27/36] Added severity medium, same as the RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:50:12 UTC 2012


---
 RHEL6/input/services/nfs.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/services/nfs.xml b/RHEL6/input/services/nfs.xml
index 6e75440..6d722b1 100644
--- a/RHEL6/input/services/nfs.xml
+++ b/RHEL6/input/services/nfs.xml
@@ -336,7 +336,7 @@ intercept the request and substitute a malicious file. Allowing setuid files to
 be executed from remote servers is particularly risky, both for this reason and
 because it requires the clients to extend root-level trust to the NFS
 server.</description>
-<Rule id="use_nodev_option_on_nfs_mounts">
+<Rule id="use_nodev_option_on_nfs_mounts" severity="medium">
 <title>Mount Remote Filesystems with nodev</title>
 <description>
 <mount-desc-macro option="nodev" part="any NFS mounts" />
@@ -352,7 +352,7 @@ should not present device files to users.</rationale>
 <oval id="mount_option_nodev_remote_filesystems" />
 </Rule>
 
-<Rule id="use_nosuid_option_on_nfs_mounts">
+<Rule id="use_nosuid_option_on_nfs_mounts" severity="medium">
 <title>Mount Remote Filesystems with nosuid</title>
 <description>
 <mount-desc-macro option="nosuid" part="any NFS mounts" />
-- 
1.8.0



More information about the scap-security-guide mailing list