<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">OK, pushed this set.<br>
      <br>
      On 09/10/2013 12:57 PM, David Smith wrote:<br>
    </div>
    <blockquote
cite="mid:CACMSFS9akfYBsZ7t3yEDrDmQ13Y1LvegQ_yLuBB7623+PpogKQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">until now -- ack!<br>
      </div>
      <div class="gmail_extra"><br>
        <br>
        <div class="gmail_quote">On Tue, Sep 10, 2013 at 12:55 PM, Maura
          Dailey <span dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">No one's
            ACKED these.<br>
            <br>
            - Maura Dailey<br>
            <br>
            On 08/30/2013 01:41 PM, Maura Dailey wrote:<br>
            <blockquote class="gmail_quote" style="margin:0 0 0
              .8ex;border-left:1px #ccc solid;padding-left:1ex">
              Added test checks for set of partition checks.<br>
              <br>
              Signed-off-by: Maura Dailey &lt;<a moz-do-not-send="true"
                href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>&gt;<br>
              ---<br>
                RHEL6/input/checks/partition_for_home.xml          |  
              18 ++++++++++--------<br>
                RHEL6/input/checks/partition_for_tmp.xml           |  
              14 ++++++++------<br>
                RHEL6/input/checks/partition_for_var.xml           |  
              18 ++++++++++--------<br>
                RHEL6/input/checks/partition_for_var_log.xml       |  
              12 +++++++-----<br>
                RHEL6/input/checks/partition_for_var_log_audit.xml |  
              18 +++++++++++-------<br>
                5 files changed, 46 insertions(+), 34 deletions(-)<br>
              <br>
              diff --git a/RHEL6/input/checks/partition_for_home.xml
              b/RHEL6/input/checks/partition_for_home.xml<br>
              index b784316..2081d18 100644<br>
              --- a/RHEL6/input/checks/partition_for_home.xml<br>
              +++ b/RHEL6/input/checks/partition_for_home.xml<br>
              @@ -5,20 +5,22 @@<br>
                      &lt;affected family="unix"&gt;<br>
                        &lt;platform&gt;Red Hat Enterprise Linux
              6&lt;/platform&gt;<br>
                      &lt;/affected&gt;<br>
              -      &lt;description&gt;If user home directories will be
              stored locally,<br>
              -      create a separate partition for /home. If /home
              will be mounted<br>
              -      from another system such as an NFS server, then
              creating a separate<br>
              -      partition is not necessary at this time, and the
              mountpoint can<br>
              -      instead be configured later.&lt;/description&gt;<br>
              +      &lt;description&gt;If user home directories will be
              stored locally, create a<br>
              +      separate partition for /home. If /home will be
              mounted from another<br>
              +      system such as an NFS server, then creating a
              separate partition is not<br>
              +      necessary at this time, and the mountpoint can
              instead be configured<br>
              +      later.&lt;/description&gt;<br>
              +      &lt;reference source="MED" ref_id="20130830"
              ref_url="test_attestation" /&gt;<br>
                    &lt;/metadata&gt;<br>
                    &lt;criteria&gt;<br>
                      &lt;criterion test_ref="test_home_partition"
              comment="/home on own partition" /&gt;<br>
                    &lt;/criteria&gt;<br>
                  &lt;/definition&gt;<br>
              -  &lt;linux:partition_test check="all"
              check_existence="all_exist" id="test_home_partition"
              version="1" comment="/home on own partition"&gt;<br>
              -      &lt;linux:object object_ref="object_mount_home_own_partition"
              /&gt;<br>
              +  &lt;linux:partition_test check="all"
              check_existence="all_exist"<br>
              +  id="test_home_partition" version="1" comment="/home on
              own partition"&gt;<br>
              +    &lt;linux:object object_ref="object_mount_home_own_partition"
              /&gt;<br>
                  &lt;/linux:partition_test&gt;<br>
                  &lt;linux:partition_object id="object_mount_home_own_partition"
              version="1"&gt;<br>
              -      &lt;linux:mount_point&gt;/home&lt;/linux:mount_point&gt;<br>
              +    &lt;linux:mount_point&gt;/home&lt;/linux:mount_point&gt;<br>
                  &lt;/linux:partition_object&gt;<br>
                &lt;/def-group&gt;<br>
              diff --git a/RHEL6/input/checks/partition_for_tmp.xml
              b/RHEL6/input/checks/partition_for_tmp.xml<br>
              index de93ee9..9c28c13 100644<br>
              --- a/RHEL6/input/checks/partition_for_tmp.xml<br>
              +++ b/RHEL6/input/checks/partition_for_tmp.xml<br>
              @@ -5,18 +5,20 @@<br>
                      &lt;affected family="unix"&gt;<br>
                        &lt;platform&gt;Red Hat Enterprise Linux
              6&lt;/platform&gt;<br>
                      &lt;/affected&gt;<br>
              -      &lt;description&gt;The /tmp directory is a
              world-writable directory<br>
              -      used for temporary file storage. Verify that it has
              its own<br>
              -      partition or logical volume.&lt;/description&gt;<br>
              +      &lt;description&gt;The /tmp directory is a
              world-writable directory used for<br>
              +      temporary file storage. Verify that it has its own
              partition or logical<br>
              +      volume.&lt;/description&gt;<br>
              +      &lt;reference source="MED" ref_id="20130830"
              ref_url="test_attestation" /&gt;<br>
                    &lt;/metadata&gt;<br>
                    &lt;criteria&gt;<br>
                      &lt;criterion test_ref="test_tmp_partition"
              comment="/tmp on own partition" /&gt;<br>
                    &lt;/criteria&gt;<br>
                  &lt;/definition&gt;<br>
              -  &lt;linux:partition_test check="all"
              check_existence="all_exist" id="test_tmp_partition"
              version="1" comment="/tmp on own partition"&gt;<br>
              -      &lt;linux:object object_ref="object_own_tmp_partition"
              /&gt;<br>
              +  &lt;linux:partition_test check="all"
              check_existence="all_exist"<br>
              +  id="test_tmp_partition" version="1" comment="/tmp on
              own partition"&gt;<br>
              +    &lt;linux:object object_ref="object_own_tmp_partition"
              /&gt;<br>
                  &lt;/linux:partition_test&gt;<br>
                  &lt;linux:partition_object
              id="object_own_tmp_partition" version="1"&gt;<br>
              -      &lt;linux:mount_point&gt;/tmp&lt;/linux:mount_point&gt;<br>
              +    &lt;linux:mount_point&gt;/tmp&lt;/linux:mount_point&gt;<br>
                  &lt;/linux:partition_object&gt;<br>
                &lt;/def-group&gt;<br>
              diff --git a/RHEL6/input/checks/partition_for_var.xml
              b/RHEL6/input/checks/partition_for_var.xml<br>
              index 58089ab..2ed1d38 100644<br>
              --- a/RHEL6/input/checks/partition_for_var.xml<br>
              +++ b/RHEL6/input/checks/partition_for_var.xml<br>
              @@ -5,20 +5,22 @@<br>
                      &lt;affected family="unix"&gt;<br>
                        &lt;platform&gt;Red Hat Enterprise Linux
              6&lt;/platform&gt;<br>
                      &lt;/affected&gt;<br>
              -      &lt;description&gt;Ensuring that /var is mounted on
              its own partition enables the<br>
              -      setting of more restrictive mount options, which is
              used as temporary<br>
              -      storage by many program, particularly system
              services such as daemons.<br>
              -      It is not uncommon for the /var directory to
              contain world-writable directories,<br>
              -      installed by other software
              packages.&lt;/description&gt;<br>
              +      &lt;description&gt;Ensuring that /var is mounted on
              its own partition enables<br>
              +      the setting of more restrictive mount options,
              which is used as temporary<br>
              +      storage by many program, particularly system
              services such as daemons. It<br>
              +      is not uncommon for the /var directory to contain
              world-writable<br>
              +      directories, installed by other software
              packages.&lt;/description&gt;<br>
              +      &lt;reference source="MED" ref_id="20130830"
              ref_url="test_attestation" /&gt;<br>
                    &lt;/metadata&gt;<br>
                    &lt;criteria&gt;<br>
                      &lt;criterion test_ref="test_var_partition"
              comment="/var on own partition" /&gt;<br>
                    &lt;/criteria&gt;<br>
                  &lt;/definition&gt;<br>
              -  &lt;linux:partition_test check="all"
              check_existence="all_exist" id="test_var_partition"
              version="1" comment="/var on own partition"&gt;<br>
              -      &lt;linux:object object_ref="object_mount_var_own_partition"
              /&gt;<br>
              +  &lt;linux:partition_test check="all"
              check_existence="all_exist"<br>
              +  id="test_var_partition" version="1" comment="/var on
              own partition"&gt;<br>
              +    &lt;linux:object object_ref="object_mount_var_own_partition"
              /&gt;<br>
                  &lt;/linux:partition_test&gt;<br>
                  &lt;linux:partition_object id="object_mount_var_own_partition"
              version="1"&gt;<br>
              -      &lt;linux:mount_point&gt;/var&lt;/linux:mount_point&gt;<br>
              +    &lt;linux:mount_point&gt;/var&lt;/linux:mount_point&gt;<br>
                  &lt;/linux:partition_object&gt;<br>
                &lt;/def-group&gt;<br>
              diff --git a/RHEL6/input/checks/partition_for_var_log.xml
              b/RHEL6/input/checks/partition_for_var_log.xml<br>
              index 8a8a6f4..94d235b 100644<br>
              --- a/RHEL6/input/checks/partition_for_var_log.xml<br>
              +++ b/RHEL6/input/checks/partition_for_var_log.xml<br>
              @@ -5,17 +5,19 @@<br>
                      &lt;affected family="unix"&gt;<br>
                        &lt;platform&gt;Red Hat Enterprise Linux
              6&lt;/platform&gt;<br>
                      &lt;/affected&gt;<br>
              -      &lt;description&gt;System logs are stored in the
              /var/log directory.<br>
              -      Ensure that it has its own partition or logical
              volume.&lt;/description&gt;<br>
              +      &lt;description&gt;System logs are stored in the
              /var/log directory. Ensure<br>
              +      that it has its own partition or logical
              volume.&lt;/description&gt;<br>
              +      &lt;reference source="MED" ref_id="20130830"
              ref_url="test_attestation" /&gt;<br>
                    &lt;/metadata&gt;<br>
                    &lt;criteria&gt;<br>
                      &lt;criterion test_ref="test_var_log_partition"
              comment="/var/log on own partition" /&gt;<br>
                    &lt;/criteria&gt;<br>
                  &lt;/definition&gt;<br>
              -  &lt;linux:partition_test check="all"
              check_existence="all_exist" id="test_var_log_partition"
              version="1" comment="/var/log on own partition"&gt;<br>
              -      &lt;linux:object object_ref="object_mount_var_log_own_partition"
              /&gt;<br>
              +  &lt;linux:partition_test check="all"
              check_existence="all_exist"<br>
              +  id="test_var_log_partition" version="1"
              comment="/var/log on own partition"&gt;<br>
              +    &lt;linux:object object_ref="object_mount_var_log_own_partition"
              /&gt;<br>
                  &lt;/linux:partition_test&gt;<br>
                  &lt;linux:partition_object
              id="object_mount_var_log_own_partition" version="1"&gt;<br>
              -      &lt;linux:mount_point&gt;/var/log&lt;/linux:mount_point&gt;<br>
              +    &lt;linux:mount_point&gt;/var/log&lt;/linux:mount_point&gt;<br>
                  &lt;/linux:partition_object&gt;<br>
                &lt;/def-group&gt;<br>
              diff --git a/RHEL6/input/checks/partition_for_var_log_audit.xml
              b/RHEL6/input/checks/partition_for_var_log_audit.xml<br>
              index e88ceba..b7a7d68 100644<br>
              --- a/RHEL6/input/checks/partition_for_var_log_audit.xml<br>
              +++ b/RHEL6/input/checks/partition_for_var_log_audit.xml<br>
              @@ -6,18 +6,22 @@<br>
                        &lt;platform&gt;Red Hat Enterprise Linux
              6&lt;/platform&gt;<br>
                      &lt;/affected&gt;<br>
                      &lt;description&gt;Audit logs are stored in the
              /var/log/audit directory.<br>
              -      Ensure that it has its own partition or logical
              volume. Make<br>
              -      absolutely certain that it is large enough to store
              all audit logs<br>
              -      that will be created by the auditing
              daemon.&lt;/description&gt;<br>
              +      Ensure that it has its own partition or logical
              volume. Make absolutely<br>
              +      certain that it is large enough to store all audit
              logs that will be<br>
              +      created by the auditing daemon.&lt;/description&gt;<br>
              +      &lt;reference source="MED" ref_id="20130830"
              ref_url="test_attestation" /&gt;<br>
                    &lt;/metadata&gt;<br>
                    &lt;criteria&gt;<br>
                      &lt;criterion test_ref="test_var_log_audit_partition"
              comment="/var/log/audit on own partition" /&gt;<br>
                    &lt;/criteria&gt;<br>
                  &lt;/definition&gt;<br>
              -  &lt;linux:partition_test check="all"
              check_existence="all_exist" id="test_var_log_audit_partition"
              version="1" comment="check for /var/log/audit
              partition"&gt;<br>
              -      &lt;linux:object object_ref="object_mount_var_log_audit_own_partition"
              /&gt;<br>
              +  &lt;linux:partition_test check="all"
              check_existence="all_exist"<br>
              +  id="test_var_log_audit_partition" version="1"<br>
              +  comment="check for /var/log/audit partition"&gt;<br>
              +    &lt;linux:object object_ref="object_mount_var_log_audit_own_partition"
              /&gt;<br>
                  &lt;/linux:partition_test&gt;<br>
              -  &lt;linux:partition_object id="object_mount_var_log_audit_own_partition"
              version="1"&gt;<br>
              -      &lt;linux:mount_point&gt;/var/log/audit&lt;/linux:mount_point&gt;<br>
              +  &lt;linux:partition_object id="object_mount_var_log_audit_own_partition"<br>
              +  version="1"&gt;<br>
              +    &lt;linux:mount_point&gt;/var/log/audit&lt;/linux:mount_point&gt;<br>
                  &lt;/linux:partition_object&gt;<br>
                &lt;/def-group&gt;<br>
            </blockquote>
            <br>
            _______________________________________________<br>
            scap-security-guide mailing list<br>
            <a moz-do-not-send="true"
              href="mailto:scap-security-guide@lists.fedorahosted.org"
              target="_blank">scap-security-guide@lists.fedorahosted.org</a><br>
            <a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide"
              target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
scap-security-guide mailing list
<a class="moz-txt-link-abbreviated" href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>