<div dir="ltr">Agreed, please push these!<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Sep 18, 2013 at 11:59 AM, Maura Dailey <span dir="ltr">&lt;<a href="mailto:maura@eclipse.ncsc.mil" target="_blank">maura@eclipse.ncsc.mil</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">More outstanding testrefs that should be committed!<br>
<br>
---<br>
 RHEL6/input/checks/mount_option_tmp_nodev.xml  |   11 +++++++----<br>
 RHEL6/input/checks/mount_option_tmp_noexec.xml |   14 +++++++++-----<br>
 RHEL6/input/checks/mount_option_tmp_nosuid.xml |   13 ++++++++-----<br>
 3 files changed, 24 insertions(+), 14 deletions(-)<br>
<br>
diff --git a/RHEL6/input/checks/mount_option_tmp_nodev.xml b/RHEL6/input/checks/mount_option_tmp_nodev.xml<br>
index d741d29..fdd2420 100644<br>
--- a/RHEL6/input/checks/mount_option_tmp_nodev.xml<br>
+++ b/RHEL6/input/checks/mount_option_tmp_nodev.xml<br>
@@ -6,14 +6,16 @@<br>
         &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
       &lt;/affected&gt;<br>
       &lt;description&gt;Legitimate character and block devices should not exist<br>
-      within temporary directories like /tmp. The nodev mount option should<br>
-      be specified for /tmp.&lt;/description&gt;<br>
+      within temporary directories like /tmp. The nodev mount option should be<br>
+      specified for /tmp.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130821&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
     &lt;/metadata&gt;<br>
     &lt;criteria&gt;<br>
       &lt;criterion comment=&quot;nodev on /tmp&quot; test_ref=&quot;test_nodev_tmp&quot; /&gt;<br>
     &lt;/criteria&gt;<br>
   &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_nodev_tmp&quot; version=&quot;1&quot; comment=&quot;nodev on /tmp&quot;&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_nodev_tmp&quot; version=&quot;1&quot; comment=&quot;nodev on /tmp&quot;&gt;<br>
     &lt;linux:object object_ref=&quot;object_tmp_nodev_partition&quot; /&gt;<br>
     &lt;linux:state state_ref=&quot;state_tmp_nodev&quot; /&gt;<br>
   &lt;/linux:partition_test&gt;<br>
@@ -21,6 +23,7 @@<br>
     &lt;linux:mount_point&gt;/tmp&lt;/linux:mount_point&gt;<br>
   &lt;/linux:partition_object&gt;<br>
   &lt;linux:partition_state id=&quot;state_tmp_nodev&quot; version=&quot;1&quot;&gt;<br>
-    &lt;linux:mount_options datatype=&quot;string&quot; entity_check=&quot;at least one&quot; operation=&quot;equals&quot;&gt;nodev&lt;/linux:mount_options&gt;<br>
+    &lt;linux:mount_options datatype=&quot;string&quot; entity_check=&quot;at least one&quot;<br>
+    operation=&quot;equals&quot;&gt;nodev&lt;/linux:mount_options&gt;<br>
   &lt;/linux:partition_state&gt;<br>
 &lt;/def-group&gt;<br>
diff --git a/RHEL6/input/checks/mount_option_tmp_noexec.xml b/RHEL6/input/checks/mount_option_tmp_noexec.xml<br>
index d0593f8..76d8192 100644<br>
--- a/RHEL6/input/checks/mount_option_tmp_noexec.xml<br>
+++ b/RHEL6/input/checks/mount_option_tmp_noexec.xml<br>
@@ -5,15 +5,18 @@<br>
       &lt;affected family=&quot;unix&quot;&gt;<br>
         &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
       &lt;/affected&gt;<br>
-      &lt;description&gt;It can be dangerous to allow the execution of binaries<br>
-      from world-writable temporary storage directories such as /tmp.<br>
-      The noexec mount option prevents binaries from being executed out of /tmp.&lt;/description&gt;<br>
+      &lt;description&gt;It can be dangerous to allow the execution of binaries from<br>
+      world-writable temporary storage directories such as /tmp. The noexec<br>
+      mount option prevents binaries from being executed out of<br>
+      /tmp.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130821&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
     &lt;/metadata&gt;<br>
     &lt;criteria&gt;<br>
       &lt;criterion comment=&quot;noexec on /tmp&quot; test_ref=&quot;test_noexec_tmp&quot; /&gt;<br>
     &lt;/criteria&gt;<br>
   &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_noexec_tmp&quot; version=&quot;1&quot; comment=&quot;noexec on /tmp&quot;&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_noexec_tmp&quot; version=&quot;1&quot; comment=&quot;noexec on /tmp&quot;&gt;<br>
     &lt;linux:object object_ref=&quot;object_tmp_noexec_partition&quot; /&gt;<br>
     &lt;linux:state state_ref=&quot;state_tmp_noexec&quot; /&gt;<br>
   &lt;/linux:partition_test&gt;<br>
@@ -21,6 +24,7 @@<br>
     &lt;linux:mount_point&gt;/tmp&lt;/linux:mount_point&gt;<br>
   &lt;/linux:partition_object&gt;<br>
   &lt;linux:partition_state id=&quot;state_tmp_noexec&quot; version=&quot;1&quot;&gt;<br>
-    &lt;linux:mount_options datatype=&quot;string&quot; entity_check=&quot;at least one&quot; operation=&quot;equals&quot;&gt;noexec&lt;/linux:mount_options&gt;<br>
+    &lt;linux:mount_options datatype=&quot;string&quot; entity_check=&quot;at least one&quot;<br>
+    operation=&quot;equals&quot;&gt;noexec&lt;/linux:mount_options&gt;<br>
   &lt;/linux:partition_state&gt;<br>
 &lt;/def-group&gt;<br>
diff --git a/RHEL6/input/checks/mount_option_tmp_nosuid.xml b/RHEL6/input/checks/mount_option_tmp_nosuid.xml<br>
index 6477a21..b3d88c9 100644<br>
--- a/RHEL6/input/checks/mount_option_tmp_nosuid.xml<br>
+++ b/RHEL6/input/checks/mount_option_tmp_nosuid.xml<br>
@@ -5,15 +5,17 @@<br>
       &lt;affected family=&quot;unix&quot;&gt;<br>
         &lt;platform&gt;Red Hat Enterprise Linux 6&lt;/platform&gt;<br>
       &lt;/affected&gt;<br>
-      &lt;description&gt;The nosuid mount option should be set for temporary<br>
-      storage partitions such as /tmp. The suid/sgid permissions<br>
-      should not be required in these world-writable directories.&lt;/description&gt;<br>
+      &lt;description&gt;The nosuid mount option should be set for temporary storage<br>
+      partitions such as /tmp. The suid/sgid permissions should not be required<br>
+      in these world-writable directories.&lt;/description&gt;<br>
+      &lt;reference source=&quot;MED&quot; ref_id=&quot;20130821&quot; ref_url=&quot;test_attestation&quot; /&gt;<br>
     &lt;/metadata&gt;<br>
     &lt;criteria&gt;<br>
       &lt;criterion comment=&quot;nosuid on /tmp&quot; test_ref=&quot;test_nosuid_tmp&quot; /&gt;<br>
     &lt;/criteria&gt;<br>
   &lt;/definition&gt;<br>
-  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot; id=&quot;test_nosuid_tmp&quot; version=&quot;1&quot; comment=&quot;nosuid on /tmp&quot;&gt;<br>
+  &lt;linux:partition_test check=&quot;all&quot; check_existence=&quot;all_exist&quot;<br>
+  id=&quot;test_nosuid_tmp&quot; version=&quot;1&quot; comment=&quot;nosuid on /tmp&quot;&gt;<br>
     &lt;linux:object object_ref=&quot;object_tmp_nosuid_partition&quot; /&gt;<br>
     &lt;linux:state state_ref=&quot;state_tmp_nosuid&quot; /&gt;<br>
   &lt;/linux:partition_test&gt;<br>
@@ -21,6 +23,7 @@<br>
     &lt;linux:mount_point&gt;/tmp&lt;/linux:mount_point&gt;<br>
   &lt;/linux:partition_object&gt;<br>
   &lt;linux:partition_state id=&quot;state_tmp_nosuid&quot; version=&quot;1&quot;&gt;<br>
-    &lt;linux:mount_options datatype=&quot;string&quot; entity_check=&quot;at least one&quot; operation=&quot;equals&quot;&gt;nosuid&lt;/linux:mount_options&gt;<br>
+    &lt;linux:mount_options datatype=&quot;string&quot; entity_check=&quot;at least one&quot;<br>
+    operation=&quot;equals&quot;&gt;nosuid&lt;/linux:mount_options&gt;<br>
   &lt;/linux:partition_state&gt;<br>
 &lt;/def-group&gt;<br>
<span class="HOEnZb"><font color="#888888">--<br>
1.7.1<br>
<br>
_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</font></span></blockquote></div><br></div>