[PATCH] Test tags added to input/system/software/disk_partitioning.xml

Shawn Wells shawn at redhat.com
Sun Sep 30 18:57:23 UTC 2012


On 9/28/12 1:17 PM, Michael J. McConachie wrote:
>
> 0001-Test-tags-added-to-input-system-software-disk_partit.patch
>
>
>  From 6c89fda05476255dc941b8ebe6c72d989ca3a3b7 Mon Sep 17 00:00:00 2001
> From: Michael McConachie<michael at redhat.com>
> Date: Fri, 28 Sep 2012 13:17:03 -0400
> Subject: [PATCH] Test tags added to
>   input/system/software/disk_partitioning.xml
>
> ---
>   RHEL6/input/system/software/disk_partitioning.xml | 7 ++++++-
>   1 file changed, 6 insertions(+), 1 deletion(-)
>
> diff --git a/RHEL6/input/system/software/disk_partitioning.xml b/RHEL6/input/system/software/disk_partitioning.xml
> index e678d61..ef2ef29 100644
> --- a/RHEL6/input/system/software/disk_partitioning.xml
> +++ b/RHEL6/input/system/software/disk_partitioning.xml
> @@ -38,8 +38,9 @@ Placing <tt>/tmp</tt> in its own partition enables the setting of more
>   restrictive mount options, which can help protect programs which use it.
>   </rationale>
>   <ident cce="14161-4"/>
> -<oval id="mount_tmp_own_partition" />
> +<oval id="mount_tmp_own_partition"/>
>   <ref nist="CM-6" />
> +<tested by="MM" on="20120928"/>
>   </Rule>
>   
>   <Rule id="partition_for_var">
> @@ -59,6 +60,7 @@ world-writable directories, installed by other software packages.
>   <ident cce="14777-7"/>
>   <oval id="mount_var_own_partition" />
>   <ref nist="CM-6" />
> +<tested by="MM" on="20120928"/>
>   </Rule>
>   
>   <Rule id="partition_for_var_log">
> @@ -77,6 +79,7 @@ and other files in <tt>/var/</tt>.
>   <ident cce="14011-1" />
>   <oval id="mount_var_log_own_partition" />
>   <ref nist="CM-6, AU-9" />
> +<tested by="MM" on="20120928"/>
>   </Rule>
>   
>   <Rule id="partition_for_var_log_audit">
> @@ -98,6 +101,7 @@ of space.
>   <ident cce="14171-3" />
>   <oval id="mount_var_log_audit_own_partition" />
>   <ref nist="CM-6, AU-9" disa="137"/>
> +<tested by="MM" on="20120928"/>
>   </Rule>
>   
>   <Rule id="partition_for_home">
> @@ -118,6 +122,7 @@ users cannot trivially fill partitions used for log or audit data storage.
>   <ident cce="14559-9" />
>   <oval id="mount_home_own_partition" />
>   <ref nist="CM-6"/>
> +<tested by="MM" on="20120928"/>
>   </Rule>
>   
>   <Group id="partition_encryption" >
> -- 1.7.11.4

Nack


OCIL unclear. According to current wording, my system config is compliant:
$ df -h /tmp
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/vg_rhel6-lv_root
                       5.5G  3.0G  2.2G  58% /

clearly it is not
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20120930/d1fe9bc5/attachment.html>


More information about the scap-security-guide mailing list