[PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp

Shawn Wells shawn at redhat.com
Tue Sep 10 17:28:53 UTC 2013


On 9/10/13 12:56 PM, leam hall wrote:
> What's the GENID on this? I didn't find it in the Jun STIG.

There isn't one. Content within SSG represents a large collection of 
security controls, many are not reflected in specific profiles (e.g. the 
STIG). In this case, mount_option_var_tmp_bind_var is mapped as enabling 
CM-7 [1], however not tagged back to a DISA CCI (and therefor not in the 
STIG).

[1] 
https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/system/permissions/partitions.xml


More information about the scap-security-guide mailing list