<div dir="ltr">until now -- ack!<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 10, 2013 at 12:55 PM, Maura Dailey <span dir="ltr">&lt;<a href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">No one&#39;s ACKED these.<br>
<br>
- Maura Dailey<br>
<br>
On 08/30/2013 01:41 PM, Maura Dailey wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Added test checks for set of partition checks.<br>
<br>
Signed-off-by: Maura Dailey &lt;<a href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>&gt;<br>
---<br>
  RHEL6/input/checks/partition_<u></u>for_home.xml          |   18 ++++++++++--------<br>
  RHEL6/input/checks/partition_<u></u>for_tmp.xml           |   14 ++++++++------<br>
  RHEL6/input/checks/partition_<u></u>for_var.xml           |   18 ++++++++++--------<br>
  RHEL6/input/checks/partition_<u></u>for_var_log.xml       |   12 +++++++-----<br>
  RHEL6/input/checks/partition_<u></u>for_var_log_audit.xml |   18 +++++++++++-------<br>
  5 files changed, 46 insertions(+), 34 deletions(-)<br>
<br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_home.xml b/RHEL6/input/checks/<u></u>partition_for_home.xml<br>
index b784316..2081d18 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_home.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_home.xml<br>
@@ -5,20 +5,22 @@<br>
        &lt;affected family=&quot;unix&quot;&gt;<br>
          &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
        &lt;/affected&gt;<br>
-      &lt;description&gt;If user home directories will be stored locally,<br>
-      create a separate partition for /home. If /home will be mounted<br>
-      from another system such as an NFS server, then creating a separate<br>
-      partition is not necessary at this time, and the mountpoint can<br>
-      instead be configured later.&lt;/description&gt;<br>
+      &lt;description&gt;If user home directories will be stored locally, create a<br>
+      separate partition for /home. If /home will be mounted from another<br>
+      system such as an NFS server, then creating a separate partition is not<br>
+      necessary at this time, and the mountpoint can instead be configured<br>
+      later.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130830&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
      &lt;/metadata&gt;<br>
      &lt;criteria&gt;<br>
        &lt;criterion test_ref=&quot;test_home_partition&quot; comment=&quot;/home on own partition&quot; /&gt;<br>
      &lt;/criteria&gt;<br>
    &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_home_partition&quot; version=&quot;1&quot; comment=&quot;/home on own partition&quot;&gt;<br>
-      &lt;linux:object object_ref=&quot;object_mount_home_<u></u>own_partition&quot; /&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_home_partition&quot; version=&quot;1&quot; comment=&quot;/home on own partition&quot;&gt;<br>
+    &lt;linux:object object_ref=&quot;object_mount_home_<u></u>own_partition&quot; /&gt;<br>
    &lt;/linux:partition_test&gt;<br>
    &lt;linux:partition_object id=&quot;object_mount_home_own_<u></u>partition&quot; version=&quot;1&quot;&gt;<br>
-      &lt;linux:mount_point&gt;/home&lt;/<u></u>linux:mount_point&gt;<br>
+    &lt;linux:mount_point&gt;/home&lt;/<u></u>linux:mount_point&gt;<br>
    &lt;/linux:partition_object&gt;<br>
  &lt;/def-group&gt;<br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_tmp.xml b/RHEL6/input/checks/<u></u>partition_for_tmp.xml<br>
index de93ee9..9c28c13 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_tmp.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_tmp.xml<br>
@@ -5,18 +5,20 @@<br>
        &lt;affected family=&quot;unix&quot;&gt;<br>
          &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
        &lt;/affected&gt;<br>
-      &lt;description&gt;The /tmp directory is a world-writable directory<br>
-      used for temporary file storage. Verify that it has its own<br>
-      partition or logical volume.&lt;/description&gt;<br>
+      &lt;description&gt;The /tmp directory is a world-writable directory used for<br>
+      temporary file storage. Verify that it has its own partition or logical<br>
+      volume.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130830&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
      &lt;/metadata&gt;<br>
      &lt;criteria&gt;<br>
        &lt;criterion test_ref=&quot;test_tmp_partition&quot; comment=&quot;/tmp on own partition&quot; /&gt;<br>
      &lt;/criteria&gt;<br>
    &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_tmp_partition&quot; version=&quot;1&quot; comment=&quot;/tmp on own partition&quot;&gt;<br>
-      &lt;linux:object object_ref=&quot;object_own_tmp_<u></u>partition&quot; /&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_tmp_partition&quot; version=&quot;1&quot; comment=&quot;/tmp on own partition&quot;&gt;<br>
+    &lt;linux:object object_ref=&quot;object_own_tmp_<u></u>partition&quot; /&gt;<br>
    &lt;/linux:partition_test&gt;<br>
    &lt;linux:partition_object id=&quot;object_own_tmp_partition&quot; version=&quot;1&quot;&gt;<br>
-      &lt;linux:mount_point&gt;/tmp&lt;/<u></u>linux:mount_point&gt;<br>
+    &lt;linux:mount_point&gt;/tmp&lt;/<u></u>linux:mount_point&gt;<br>
    &lt;/linux:partition_object&gt;<br>
  &lt;/def-group&gt;<br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_var.xml b/RHEL6/input/checks/<u></u>partition_for_var.xml<br>
index 58089ab..2ed1d38 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_var.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_var.xml<br>
@@ -5,20 +5,22 @@<br>
        &lt;affected family=&quot;unix&quot;&gt;<br>
          &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
        &lt;/affected&gt;<br>
-      &lt;description&gt;Ensuring that /var is mounted on its own partition enables the<br>
-      setting of more restrictive mount options, which is used as temporary<br>
-      storage by many program, particularly system services such as daemons.<br>
-      It is not uncommon for the /var directory to contain world-writable directories,<br>
-      installed by other software packages.&lt;/description&gt;<br>
+      &lt;description&gt;Ensuring that /var is mounted on its own partition enables<br>
+      the setting of more restrictive mount options, which is used as temporary<br>
+      storage by many program, particularly system services such as daemons. It<br>
+      is not uncommon for the /var directory to contain world-writable<br>
+      directories, installed by other software packages.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130830&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
      &lt;/metadata&gt;<br>
      &lt;criteria&gt;<br>
        &lt;criterion test_ref=&quot;test_var_partition&quot; comment=&quot;/var on own partition&quot; /&gt;<br>
      &lt;/criteria&gt;<br>
    &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_var_partition&quot; version=&quot;1&quot; comment=&quot;/var on own partition&quot;&gt;<br>
-      &lt;linux:object object_ref=&quot;object_mount_var_<u></u>own_partition&quot; /&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_var_partition&quot; version=&quot;1&quot; comment=&quot;/var on own partition&quot;&gt;<br>
+    &lt;linux:object object_ref=&quot;object_mount_var_<u></u>own_partition&quot; /&gt;<br>
    &lt;/linux:partition_test&gt;<br>
    &lt;linux:partition_object id=&quot;object_mount_var_own_<u></u>partition&quot; version=&quot;1&quot;&gt;<br>
-      &lt;linux:mount_point&gt;/var&lt;/<u></u>linux:mount_point&gt;<br>
+    &lt;linux:mount_point&gt;/var&lt;/<u></u>linux:mount_point&gt;<br>
    &lt;/linux:partition_object&gt;<br>
  &lt;/def-group&gt;<br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_var_log.xml b/RHEL6/input/checks/<u></u>partition_for_var_log.xml<br>
index 8a8a6f4..94d235b 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_var_log.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_var_log.xml<br>
@@ -5,17 +5,19 @@<br>
        &lt;affected family=&quot;unix&quot;&gt;<br>
          &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
        &lt;/affected&gt;<br>
-      &lt;description&gt;System logs are stored in the /var/log directory.<br>
-      Ensure that it has its own partition or logical volume.&lt;/description&gt;<br>
+      &lt;description&gt;System logs are stored in the /var/log directory. Ensure<br>
+      that it has its own partition or logical volume.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130830&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
      &lt;/metadata&gt;<br>
      &lt;criteria&gt;<br>
        &lt;criterion test_ref=&quot;test_var_log_<u></u>partition&quot; comment=&quot;/var/log on own partition&quot; /&gt;<br>
      &lt;/criteria&gt;<br>
    &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_var_log_partition&quot; version=&quot;1&quot; comment=&quot;/var/log on own partition&quot;&gt;<br>
-      &lt;linux:object object_ref=&quot;object_mount_var_<u></u>log_own_partition&quot; /&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_var_log_partition&quot; version=&quot;1&quot; comment=&quot;/var/log on own partition&quot;&gt;<br>
+    &lt;linux:object object_ref=&quot;object_mount_var_<u></u>log_own_partition&quot; /&gt;<br>
    &lt;/linux:partition_test&gt;<br>
    &lt;linux:partition_object id=&quot;object_mount_var_log_own_<u></u>partition&quot; version=&quot;1&quot;&gt;<br>
-      &lt;linux:mount_point&gt;/var/log&lt;/<u></u>linux:mount_point&gt;<br>
+    &lt;linux:mount_point&gt;/var/log&lt;/<u></u>linux:mount_point&gt;<br>
    &lt;/linux:partition_object&gt;<br>
  &lt;/def-group&gt;<br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml b/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml<br>
index e88ceba..b7a7d68 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml<br>
@@ -6,18 +6,22 @@<br>
          &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
        &lt;/affected&gt;<br>
        &lt;description&gt;Audit logs are stored in the /var/log/audit directory.<br>
-      Ensure that it has its own partition or logical volume. Make<br>
-      absolutely certain that it is large enough to store all audit logs<br>
-      that will be created by the auditing daemon.&lt;/description&gt;<br>
+      Ensure that it has its own partition or logical volume. Make absolutely<br>
+      certain that it is large enough to store all audit logs that will be<br>
+      created by the auditing daemon.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130830&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
      &lt;/metadata&gt;<br>
      &lt;criteria&gt;<br>
        &lt;criterion test_ref=&quot;test_var_log_audit_<u></u>partition&quot; comment=&quot;/var/log/audit on own partition&quot; /&gt;<br>
      &lt;/criteria&gt;<br>
    &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_var_log_audit_<u></u>partition&quot; version=&quot;1&quot; comment=&quot;check for /var/log/audit partition&quot;&gt;<br>

-      &lt;linux:object object_ref=&quot;object_mount_var_<u></u>log_audit_own_partition&quot; /&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_var_log_audit_<u></u>partition&quot; version=&quot;1&quot;<br>
+  comment=&quot;check for /var/log/audit partition&quot;&gt;<br>
+    &lt;linux:object object_ref=&quot;object_mount_var_<u></u>log_audit_own_partition&quot; /&gt;<br>
    &lt;/linux:partition_test&gt;<br>
-  &lt;linux:partition_object id=&quot;object_mount_var_log_<u></u>audit_own_partition&quot; version=&quot;1&quot;&gt;<br>
-      &lt;linux:mount_point&gt;/var/log/<u></u>audit&lt;/linux:mount_point&gt;<br>
+  &lt;linux:partition_object id=&quot;object_mount_var_log_<u></u>audit_own_partition&quot;<br>
+  version=&quot;1&quot;&gt;<br>
+    &lt;linux:mount_point&gt;/var/log/<u></u>audit&lt;/linux:mount_point&gt;<br>
    &lt;/linux:partition_object&gt;<br>
  &lt;/def-group&gt;<br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.<u></u>fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.<u></u>org/mailman/listinfo/scap-<u></u>security-guide</a><br>
</blockquote></div><br></div>