[PATCH 33/36] Added severity medium, same as the RHEL 5 STIG.

Michele Newman mnewman at redhat.com
Thu Oct 25 13:50:18 UTC 2012


---
 RHEL6/input/services/nfs.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/RHEL6/input/services/nfs.xml b/RHEL6/input/services/nfs.xml
index 6d722b1..b2b1627 100644
--- a/RHEL6/input/services/nfs.xml
+++ b/RHEL6/input/services/nfs.xml
@@ -466,7 +466,7 @@ attacker could gain access to data on the NFS server.</rationale>
 <oval id="TO:DO" />
 </Rule>
 
-<Rule id="no_insecure_locks_exports">
+<Rule id="no_insecure_locks_exports" severity="medium">
 <title>Ensure Insecure File Locking is Not Allowed</title>
 <description>By default the NFS server requires secure file-lock requests,
 which require credentials from the client in order to lock a file. Most NFS
-- 
1.8.0



More information about the scap-security-guide mailing list