<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">OK, pushed this set.<br>
<br>
On 09/10/2013 12:57 PM, David Smith wrote:<br>
</div>
<blockquote
cite="mid:CACMSFS9akfYBsZ7t3yEDrDmQ13Y1LvegQ_yLuBB7623+PpogKQ@mail.gmail.com"
type="cite">
<div dir="ltr">until now -- ack!<br>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Tue, Sep 10, 2013 at 12:55 PM, Maura
Dailey <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">No one's
ACKED these.<br>
<br>
- Maura Dailey<br>
<br>
On 08/30/2013 01:41 PM, Maura Dailey wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
Added test checks for set of partition checks.<br>
<br>
Signed-off-by: Maura Dailey <<a moz-do-not-send="true"
href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>><br>
---<br>
RHEL6/input/checks/partition_for_home.xml |
18 ++++++++++--------<br>
RHEL6/input/checks/partition_for_tmp.xml |
14 ++++++++------<br>
RHEL6/input/checks/partition_for_var.xml |
18 ++++++++++--------<br>
RHEL6/input/checks/partition_for_var_log.xml |
12 +++++++-----<br>
RHEL6/input/checks/partition_for_var_log_audit.xml |
18 +++++++++++-------<br>
5 files changed, 46 insertions(+), 34 deletions(-)<br>
<br>
diff --git a/RHEL6/input/checks/partition_for_home.xml
b/RHEL6/input/checks/partition_for_home.xml<br>
index b784316..2081d18 100644<br>
--- a/RHEL6/input/checks/partition_for_home.xml<br>
+++ b/RHEL6/input/checks/partition_for_home.xml<br>
@@ -5,20 +5,22 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux
6</platform><br>
</affected><br>
- <description>If user home directories will be
stored locally,<br>
- create a separate partition for /home. If /home
will be mounted<br>
- from another system such as an NFS server, then
creating a separate<br>
- partition is not necessary at this time, and the
mountpoint can<br>
- instead be configured later.</description><br>
+ <description>If user home directories will be
stored locally, create a<br>
+ separate partition for /home. If /home will be
mounted from another<br>
+ system such as an NFS server, then creating a
separate partition is not<br>
+ necessary at this time, and the mountpoint can
instead be configured<br>
+ later.</description><br>
+ <reference source="MED" ref_id="20130830"
ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_home_partition"
comment="/home on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all"
check_existence="all_exist" id="test_home_partition"
version="1" comment="/home on own partition"><br>
- <linux:object object_ref="object_mount_home_own_partition"
/><br>
+ <linux:partition_test check="all"
check_existence="all_exist"<br>
+ id="test_home_partition" version="1" comment="/home on
own partition"><br>
+ <linux:object object_ref="object_mount_home_own_partition"
/><br>
</linux:partition_test><br>
<linux:partition_object id="object_mount_home_own_partition"
version="1"><br>
- <linux:mount_point>/home</linux:mount_point><br>
+ <linux:mount_point>/home</linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/partition_for_tmp.xml
b/RHEL6/input/checks/partition_for_tmp.xml<br>
index de93ee9..9c28c13 100644<br>
--- a/RHEL6/input/checks/partition_for_tmp.xml<br>
+++ b/RHEL6/input/checks/partition_for_tmp.xml<br>
@@ -5,18 +5,20 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux
6</platform><br>
</affected><br>
- <description>The /tmp directory is a
world-writable directory<br>
- used for temporary file storage. Verify that it has
its own<br>
- partition or logical volume.</description><br>
+ <description>The /tmp directory is a
world-writable directory used for<br>
+ temporary file storage. Verify that it has its own
partition or logical<br>
+ volume.</description><br>
+ <reference source="MED" ref_id="20130830"
ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_tmp_partition"
comment="/tmp on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all"
check_existence="all_exist" id="test_tmp_partition"
version="1" comment="/tmp on own partition"><br>
- <linux:object object_ref="object_own_tmp_partition"
/><br>
+ <linux:partition_test check="all"
check_existence="all_exist"<br>
+ id="test_tmp_partition" version="1" comment="/tmp on
own partition"><br>
+ <linux:object object_ref="object_own_tmp_partition"
/><br>
</linux:partition_test><br>
<linux:partition_object
id="object_own_tmp_partition" version="1"><br>
- <linux:mount_point>/tmp</linux:mount_point><br>
+ <linux:mount_point>/tmp</linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/partition_for_var.xml
b/RHEL6/input/checks/partition_for_var.xml<br>
index 58089ab..2ed1d38 100644<br>
--- a/RHEL6/input/checks/partition_for_var.xml<br>
+++ b/RHEL6/input/checks/partition_for_var.xml<br>
@@ -5,20 +5,22 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux
6</platform><br>
</affected><br>
- <description>Ensuring that /var is mounted on
its own partition enables the<br>
- setting of more restrictive mount options, which is
used as temporary<br>
- storage by many program, particularly system
services such as daemons.<br>
- It is not uncommon for the /var directory to
contain world-writable directories,<br>
- installed by other software
packages.</description><br>
+ <description>Ensuring that /var is mounted on
its own partition enables<br>
+ the setting of more restrictive mount options,
which is used as temporary<br>
+ storage by many program, particularly system
services such as daemons. It<br>
+ is not uncommon for the /var directory to contain
world-writable<br>
+ directories, installed by other software
packages.</description><br>
+ <reference source="MED" ref_id="20130830"
ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_var_partition"
comment="/var on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all"
check_existence="all_exist" id="test_var_partition"
version="1" comment="/var on own partition"><br>
- <linux:object object_ref="object_mount_var_own_partition"
/><br>
+ <linux:partition_test check="all"
check_existence="all_exist"<br>
+ id="test_var_partition" version="1" comment="/var on
own partition"><br>
+ <linux:object object_ref="object_mount_var_own_partition"
/><br>
</linux:partition_test><br>
<linux:partition_object id="object_mount_var_own_partition"
version="1"><br>
- <linux:mount_point>/var</linux:mount_point><br>
+ <linux:mount_point>/var</linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/partition_for_var_log.xml
b/RHEL6/input/checks/partition_for_var_log.xml<br>
index 8a8a6f4..94d235b 100644<br>
--- a/RHEL6/input/checks/partition_for_var_log.xml<br>
+++ b/RHEL6/input/checks/partition_for_var_log.xml<br>
@@ -5,17 +5,19 @@<br>
<affected family="unix"><br>
<platform>Red Hat Enterprise Linux
6</platform><br>
</affected><br>
- <description>System logs are stored in the
/var/log directory.<br>
- Ensure that it has its own partition or logical
volume.</description><br>
+ <description>System logs are stored in the
/var/log directory. Ensure<br>
+ that it has its own partition or logical
volume.</description><br>
+ <reference source="MED" ref_id="20130830"
ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_var_log_partition"
comment="/var/log on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all"
check_existence="all_exist" id="test_var_log_partition"
version="1" comment="/var/log on own partition"><br>
- <linux:object object_ref="object_mount_var_log_own_partition"
/><br>
+ <linux:partition_test check="all"
check_existence="all_exist"<br>
+ id="test_var_log_partition" version="1"
comment="/var/log on own partition"><br>
+ <linux:object object_ref="object_mount_var_log_own_partition"
/><br>
</linux:partition_test><br>
<linux:partition_object
id="object_mount_var_log_own_partition" version="1"><br>
- <linux:mount_point>/var/log</linux:mount_point><br>
+ <linux:mount_point>/var/log</linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
diff --git a/RHEL6/input/checks/partition_for_var_log_audit.xml
b/RHEL6/input/checks/partition_for_var_log_audit.xml<br>
index e88ceba..b7a7d68 100644<br>
--- a/RHEL6/input/checks/partition_for_var_log_audit.xml<br>
+++ b/RHEL6/input/checks/partition_for_var_log_audit.xml<br>
@@ -6,18 +6,22 @@<br>
<platform>Red Hat Enterprise Linux
6</platform><br>
</affected><br>
<description>Audit logs are stored in the
/var/log/audit directory.<br>
- Ensure that it has its own partition or logical
volume. Make<br>
- absolutely certain that it is large enough to store
all audit logs<br>
- that will be created by the auditing
daemon.</description><br>
+ Ensure that it has its own partition or logical
volume. Make absolutely<br>
+ certain that it is large enough to store all audit
logs that will be<br>
+ created by the auditing daemon.</description><br>
+ <reference source="MED" ref_id="20130830"
ref_url="test_attestation" /><br>
</metadata><br>
<criteria><br>
<criterion test_ref="test_var_log_audit_partition"
comment="/var/log/audit on own partition" /><br>
</criteria><br>
</definition><br>
- <linux:partition_test check="all"
check_existence="all_exist" id="test_var_log_audit_partition"
version="1" comment="check for /var/log/audit
partition"><br>
- <linux:object object_ref="object_mount_var_log_audit_own_partition"
/><br>
+ <linux:partition_test check="all"
check_existence="all_exist"<br>
+ id="test_var_log_audit_partition" version="1"<br>
+ comment="check for /var/log/audit partition"><br>
+ <linux:object object_ref="object_mount_var_log_audit_own_partition"
/><br>
</linux:partition_test><br>
- <linux:partition_object id="object_mount_var_log_audit_own_partition"
version="1"><br>
- <linux:mount_point>/var/log/audit</linux:mount_point><br>
+ <linux:partition_object id="object_mount_var_log_audit_own_partition"<br>
+ version="1"><br>
+ <linux:mount_point>/var/log/audit</linux:mount_point><br>
</linux:partition_object><br>
</def-group><br>
</blockquote>
<br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a moz-do-not-send="true"
href="mailto:scap-security-guide@lists.fedorahosted.org"
target="_blank">scap-security-guide@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide"
target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
scap-security-guide mailing list
<a class="moz-txt-link-abbreviated" href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>
<a class="moz-txt-link-freetext" href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a>
</pre>
</blockquote>
<br>
</body>
</html>