<div dir="ltr">until now -- ack!<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Sep 10, 2013 at 12:55 PM, Maura Dailey <span dir="ltr"><<a href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">No one's ACKED these.<br>
<br>
- Maura Dailey<br>
<br>
On 08/30/2013 01:41 PM, Maura Dailey wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Added test checks for set of partition checks.<br>
<br>
Signed-off-by: Maura Dailey <<a href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>><br>
---<br>
RHEL6/input/checks/partition_<u></u>for_home.xml | 18 ++++++++++--------<br>
RHEL6/input/checks/partition_<u></u>for_tmp.xml | 14 ++++++++------<br>
RHEL6/input/checks/partition_<u></u>for_var.xml | 18 ++++++++++--------<br>
RHEL6/input/checks/partition_<u></u>for_var_log.xml | 12 +++++++-----<br>
RHEL6/input/checks/partition_<u></u>for_var_log_audit.xml | 18 +++++++++++-------<br>
5 files changed, 46 insertions(+), 34 deletions(-)<br>
<br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_home.xml b/RHEL6/input/checks/<u></u>partition_for_home.xml<br>
index b784316..2081d18 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_home.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_home.xml<br>
@@ -5,20 +5,22 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux 6</platform><br>
</affected><br>
- <description>If user home directories will be stored locally,<br>
- create a separate partition for /home. If /home will be mounted<br>
- from another system such as an NFS server, then creating a separate<br>
- partition is not necessary at this time, and the mountpoint can<br>
- instead be configured later.</description><br>
+ <description>If user home directories will be stored locally, create a<br>
+ separate partition for /home. If /home will be mounted from another<br>
+ system such as an NFS server, then creating a separate partition is not<br>
+ necessary at this time, and the mountpoint can instead be configured<br>
+ later.</description><br>
+ <reference source="MED" ref_id="20130830" ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_home_partition" comment="/home on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all" check_existence="all_exist" id="test_home_partition" version="1" comment="/home on own partition"><br>
- <linux:object object_ref="object_mount_home_<u></u>own_partition" /><br>
+ <linux:partition_test check="all" check_existence="all_exist"<br>
+ id="test_home_partition" version="1" comment="/home on own partition"><br>
+ <linux:object object_ref="object_mount_home_<u></u>own_partition" /><br>
</linux:partition_test><br>
<linux:partition_object id="object_mount_home_own_<u></u>partition" version="1"><br>
- <linux:mount_point>/home</<u></u>linux:mount_point><br>
+ <linux:mount_point>/home</<u></u>linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_tmp.xml b/RHEL6/input/checks/<u></u>partition_for_tmp.xml<br>
index de93ee9..9c28c13 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_tmp.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_tmp.xml<br>
@@ -5,18 +5,20 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux 6</platform><br>
</affected><br>
- <description>The /tmp directory is a world-writable directory<br>
- used for temporary file storage. Verify that it has its own<br>
- partition or logical volume.</description><br>
+ <description>The /tmp directory is a world-writable directory used for<br>
+ temporary file storage. Verify that it has its own partition or logical<br>
+ volume.</description><br>
+ <reference source="MED" ref_id="20130830" ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_tmp_partition" comment="/tmp on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all" check_existence="all_exist" id="test_tmp_partition" version="1" comment="/tmp on own partition"><br>
- <linux:object object_ref="object_own_tmp_<u></u>partition" /><br>
+ <linux:partition_test check="all" check_existence="all_exist"<br>
+ id="test_tmp_partition" version="1" comment="/tmp on own partition"><br>
+ <linux:object object_ref="object_own_tmp_<u></u>partition" /><br>
</linux:partition_test><br>
<linux:partition_object id="object_own_tmp_partition" version="1"><br>
- <linux:mount_point>/tmp</<u></u>linux:mount_point><br>
+ <linux:mount_point>/tmp</<u></u>linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_var.xml b/RHEL6/input/checks/<u></u>partition_for_var.xml<br>
index 58089ab..2ed1d38 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_var.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_var.xml<br>
@@ -5,20 +5,22 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux 6</platform><br>
</affected><br>
- <description>Ensuring that /var is mounted on its own partition enables the<br>
- setting of more restrictive mount options, which is used as temporary<br>
- storage by many program, particularly system services such as daemons.<br>
- It is not uncommon for the /var directory to contain world-writable directories,<br>
- installed by other software packages.</description><br>
+ <description>Ensuring that /var is mounted on its own partition enables<br>
+ the setting of more restrictive mount options, which is used as temporary<br>
+ storage by many program, particularly system services such as daemons. It<br>
+ is not uncommon for the /var directory to contain world-writable<br>
+ directories, installed by other software packages.</description><br>
+ <reference source="MED" ref_id="20130830" ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_var_partition" comment="/var on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all" check_existence="all_exist" id="test_var_partition" version="1" comment="/var on own partition"><br>
- <linux:object object_ref="object_mount_var_<u></u>own_partition" /><br>
+ <linux:partition_test check="all" check_existence="all_exist"<br>
+ id="test_var_partition" version="1" comment="/var on own partition"><br>
+ <linux:object object_ref="object_mount_var_<u></u>own_partition" /><br>
</linux:partition_test><br>
<linux:partition_object id="object_mount_var_own_<u></u>partition" version="1"><br>
- <linux:mount_point>/var</<u></u>linux:mount_point><br>
+ <linux:mount_point>/var</<u></u>linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_var_log.xml b/RHEL6/input/checks/<u></u>partition_for_var_log.xml<br>
index 8a8a6f4..94d235b 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_var_log.xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_var_log.xml<br>
@@ -5,17 +5,19 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux 6</platform><br>
</affected><br>
- <description>System logs are stored in the /var/log directory.<br>
- Ensure that it has its own partition or logical volume.</description><br>
+ <description>System logs are stored in the /var/log directory. Ensure<br>
+ that it has its own partition or logical volume.</description><br>
+ <reference source="MED" ref_id="20130830" ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_var_log_<u></u>partition" comment="/var/log on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all" check_existence="all_exist" id="test_var_log_partition" version="1" comment="/var/log on own partition"><br>
- <linux:object object_ref="object_mount_var_<u></u>log_own_partition" /><br>
+ <linux:partition_test check="all" check_existence="all_exist"<br>
+ id="test_var_log_partition" version="1" comment="/var/log on own partition"><br>
+ <linux:object object_ref="object_mount_var_<u></u>log_own_partition" /><br>
</linux:partition_test><br>
<linux:partition_object id="object_mount_var_log_own_<u></u>partition" version="1"><br>
- <linux:mount_point>/var/log</<u></u>linux:mount_point><br>
+ <linux:mount_point>/var/log</<u></u>linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml b/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml<br>
index e88ceba..b7a7d68 100644<br>
--- a/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml<br>
+++ b/RHEL6/input/checks/<u></u>partition_for_var_log_audit.<u></u>xml<br>
@@ -6,18 +6,22 @@<br>
<platform>Red Hat Enterprise Linux 6</platform><br>
</affected><br>
<description>Audit logs are stored in the /var/log/audit directory.<br>
- Ensure that it has its own partition or logical volume. Make<br>
- absolutely certain that it is large enough to store all audit logs<br>
- that will be created by the auditing daemon.</description><br>
+ Ensure that it has its own partition or logical volume. Make absolutely<br>
+ certain that it is large enough to store all audit logs that will be<br>
+ created by the auditing daemon.</description><br>
+ <reference source="MED" ref_id="20130830" ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_var_log_audit_<u></u>partition" comment="/var/log/audit on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all" check_existence="all_exist" id="test_var_log_audit_<u></u>partition" version="1" comment="check for /var/log/audit partition"><br>
- <linux:object object_ref="object_mount_var_<u></u>log_audit_own_partition" /><br>
+ <linux:partition_test check="all" check_existence="all_exist"<br>
+ id="test_var_log_audit_<u></u>partition" version="1"<br>
+ comment="check for /var/log/audit partition"><br>
+ <linux:object object_ref="object_mount_var_<u></u>log_audit_own_partition" /><br>
</linux:partition_test><br>
- <linux:partition_object id="object_mount_var_log_<u></u>audit_own_partition" version="1"><br>
- <linux:mount_point>/var/log/<u></u>audit</linux:mount_point><br>
+ <linux:partition_object id="object_mount_var_log_<u></u>audit_own_partition"<br>
+ version="1"><br>
+ <linux:mount_point>/var/log/<u></u>audit</linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.<u></u>fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.<u></u>org/mailman/listinfo/scap-<u></u>security-guide</a><br>
</blockquote></div><br></div>