[PATCH 1/3] minor edits to permissions section text

Jeffrey Blank blank at eclipse.ncsc.mil
Thu Mar 6 05:08:12 UTC 2014


Signed-off-by: Jeffrey Blank <blank at eclipse.ncsc.mil>
---
 RHEL/6/input/system/permissions/files.xml       |    1 -
 RHEL/6/input/system/permissions/mounting.xml    |    5 ++++-
 RHEL/6/input/system/permissions/permissions.xml |    2 +-
 3 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/RHEL/6/input/system/permissions/files.xml b/RHEL/6/input/system/permissions/files.xml
index 4b36286..58f7926 100644
--- a/RHEL/6/input/system/permissions/files.xml
+++ b/RHEL/6/input/system/permissions/files.xml
@@ -243,7 +243,6 @@ Shared libraries are stored in the following directories:
 /lib64
 /usr/lib
 /usr/lib64
-Additionlly, kernel modules are stored in <tt>/lib/modules</tt>.
 </pre>
 For each of these directories, run the following command to find files not 
 owned by root:
diff --git a/RHEL/6/input/system/permissions/mounting.xml b/RHEL/6/input/system/permissions/mounting.xml
index 038aab5..bd77986 100644
--- a/RHEL/6/input/system/permissions/mounting.xml
+++ b/RHEL/6/input/system/permissions/mounting.xml
@@ -128,7 +128,10 @@ $ gconftool-2 --direct \
 	--config-source xml:read:/etc/gconf/gconf.xml.mandatory \
 	--get /apps/nautilus/preferences/media_autorun_never</pre>
 </ocil>
-<rationale>Disabling 
+<rationale>Disabling automatic mounting in GNOME can prevent
+the introduction of malware via removable media.
+It will, however, also prevent desktop users from legitimate use
+of removable media. 
 </rationale>
 <ident cce="27035-5" />
 <oval id="gconf_gnome_disable_automount" />
diff --git a/RHEL/6/input/system/permissions/permissions.xml b/RHEL/6/input/system/permissions/permissions.xml
index 7f3302a..bdc9427 100644
--- a/RHEL/6/input/system/permissions/permissions.xml
+++ b/RHEL/6/input/system/permissions/permissions.xml
@@ -6,7 +6,7 @@ modifying files to which they should not have access.
 <br /><br />
 Several of the commands in this section search filesystems
 for files or directories with certain characteristics, and are
-intended to be run on every local partition on a given machine.
+intended to be run on every local partition on a given system.
 When the variable <i>PART</i> appears in one of the commands below,
 it means that the command is intended to be run repeatedly, with the
 name of each local partition substituted for <i>PART</i> in turn.
-- 
1.7.1



More information about the scap-security-guide mailing list