[PATCH 33/36] Added severity medium, same as the RHEL 5 STIG.
Michele Newman
mnewman at redhat.com
Thu Oct 25 13:50:18 UTC 2012
---
RHEL6/input/services/nfs.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/RHEL6/input/services/nfs.xml b/RHEL6/input/services/nfs.xml
index 6d722b1..b2b1627 100644
--- a/RHEL6/input/services/nfs.xml
+++ b/RHEL6/input/services/nfs.xml
@@ -466,7 +466,7 @@ attacker could gain access to data on the NFS server.</rationale>
<oval id="TO:DO" />
</Rule>
-<Rule id="no_insecure_locks_exports">
+<Rule id="no_insecure_locks_exports" severity="medium">
<title>Ensure Insecure File Locking is Not Allowed</title>
<description>By default the NFS server requires secure file-lock requests,
which require credentials from the client in order to lock a file. Most NFS
--
1.8.0
More information about the scap-security-guide
mailing list