[PATCH 1/5] Corrected rule mapping for CCI-143.
Removed mapping from partition_for_var_log and mapped to
configure_auditd_admin_space_left_action and configure_auditd_space_left_action.
Signed-off-by: Willy Santos <wsantos(a)redhat.com>
---
RHEL6/input/system/auditing.xml | 4 ++--
RHEL6/input/system/software/disk_partitioning.xml | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/system/auditing.xml b/RHEL6/input/system/auditing.xml
index 56936cf..e679cb1 100644
--- a/RHEL6/input/system/auditing.xml
+++ b/RHEL6/input/system/auditing.xml
@@ -274,7 +274,7 @@ Setting this to <tt>email</tt> is recommended over the
default
<rationale>Notifying administrators of an impending disk space problem may
allow them to take corrective action prior to any disruption.</rationale>
<oval id="auditd_data_retention_space_left_action"
value="var_auditd_space_left_action"/>
-<ref disa="140,144" />
+<ref disa="140,143,144" />
</Rule>
@@ -298,7 +298,7 @@ audit records. If a separate partition or logical volume of adequate
size
is used, running low on space for audit records should never occur.
</rationale>
<oval id="auditd_data_retention_admin_space_left_action"
value="var_auditd_admin_space_left_action" />
-<ref disa="140,144" />
+<ref disa="140,143,144" />
</Rule>
diff --git a/RHEL6/input/system/software/disk_partitioning.xml
b/RHEL6/input/system/software/disk_partitioning.xml
index 5df191b..4218a33 100644
--- a/RHEL6/input/system/software/disk_partitioning.xml
+++ b/RHEL6/input/system/software/disk_partitioning.xml
@@ -74,7 +74,7 @@ and other files in <tt>/var/</tt>.
</rationale>
<ident cce="14011-1" />
<oval id="mount_var_log_own_partition" />
-<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9"
disa="143"/>
+<ref nist="CM-6, AU-9" cnss="CNSSexample7.8.9"
disa=""/>
</Rule>
<Rule id="partition_for_var_log_audit">
--
1.7.7.6