[PATCH 08/64] Mapped /var/log/audit partition to partition_for_var_log_audit

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:05:11 UTC 2013


-------------- next part --------------
>From 627719f84e39654b25d857f9ed7355ca8d68ea44 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 13:43:06 -0400
Subject: [PATCH 08/64] Mapped /var/log/audit partition to partition_for_var_log_audit

AU-4 calls for "The organization allocates audit record storage capacity and configures auditing to reduce
the likelihood of such capacity being exceeded. "

partition_for_var_log_audit meets this by establishing /var/log/audit on it's own partition
---
 RHEL6/input/system/software/disk_partitioning.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/system/software/disk_partitioning.xml b/RHEL6/input/system/software/disk_partitioning.xml
index 5a0d4a4..7d5cc5b 100644
--- a/RHEL6/input/system/software/disk_partitioning.xml
+++ b/RHEL6/input/system/software/disk_partitioning.xml
@@ -100,7 +100,7 @@ of space.
 </rationale>
 <ident cce="26436-6" />
 <oval id="partition_for_var_log_audit" />
-<ref nist="AU-9" disa="137,138,1208"/>
+<ref nist="AU-4,AU-9" disa="137,138,1208"/>
 <tested by="MM" on="20120928"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list