Removed mapping from partition_for_var_log and mapped to configure_auditd_admin_space_left_action and configure_auditd_space_left_action.
Signed-off-by: Willy Santos <[email protected]> --- RHEL6/input/system/auditing.xml | 4 ++-- RHEL6/input/system/software/disk_partitioning.xml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml index 56936cf..e679cb1 100644 --- a/RHEL6/input/system/auditing.xml +++ b/RHEL6/input/system/auditing.xml @@ -274,7 +274,7 @@ Setting this to <tt>email</tt> is recommended over the default <rationale>Notifying administrators of an impending disk space problem may allow them to take corrective action prior to any disruption.</rationale> <oval id="auditd_data_retention_space_left_action" value="var_auditd_space_left_action"/> -<ref disa="140,144" /> +<ref disa="140,143,144" /> </Rule> @@ -298,7 +298,7 @@ audit records. If a separate partition or logical volume of adequate size is used, running low on space for audit records should never occur. </rationale> <oval id="auditd_data_retention_admin_space_left_action" value="var_auditd_admin_space_left_action" /> -<ref disa="140,144" /> +<ref disa="140,143,144" /> </Rule> diff --git a/RHEL6/input/system/software/disk_partitioning.xml b/RHEL6/input/system/software/disk_partitioning.xml index 5df191b..4218a33 100644 --- a/RHEL6/input/system/software/disk_partitioning.xml +++ b/RHEL6/input/system/software/disk_partitioning.xml @@ -74,7 +74,7 @@ and other files in <tt>/var/</tt>. </rationale> <ident cce="14011-1" /> <oval id="mount_var_log_own_partition" /> -<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9" disa="143"/> +<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9" disa=""/> </Rule> <Rule id="partition_for_var_log_audit"> -- 1.7.7.6 _______________________________________________ scap-security-guide mailing list [email protected] https://fedorahosted.org/mailman/listinfo/scap-security-guide
