-
Notifications
You must be signed in to change notification settings - Fork 0
/
RHEL-06-000001.sh
executable file
·68 lines (63 loc) · 2.38 KB
/
RHEL-06-000001.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
#!/bin/bash
#
##########################################################################
#Red Hat Enterprise Linux 6 - DISA STIG Compliance Remediation Content
#Copyright (C) 2013
#Vincent C. Passaro ([email protected])
#
##########################################################################
#
###################### Buddha Labs LLC ################################
# By Vincent C. Passaro #
# Buddha Labs LLC. #
# vince[@]buddhalabs[.]com #
# www.buddhalabs.com #
###################### Buddha Labs LLC ################################
#_________________________________________________________________________
# Version | Change Information | Author | Date
#-------------------------------------------------------------------------
# 1.0 | Initial Script Creation | Vincent Passaro | 1-JUNE-2013
#
#
#######################DISA INFORMATION##################################
# Group ID (Vulid): RHEL-06-000001
# Group Title: SRG-OS-999999
#
# Rule ID: RHEL-06-000001_rule
# Severity: low
# Rule Version (STIG-ID): RHEL-06-000001
# Rule Title: The system must use a separate file system for /tmp.
#
# Vulnerability Discussion: The "/tmp" partition is used as temporary
# storage by many programs. Placing "/tmp" in its own partition enables the
# setting of more restrictive mount options, which can help protect
# programs which use it.
#
# Responsibility:
# IAControls:
#
# Check Content:
#
# Run the following command to determine if "/tmp" is on its own
# partition or logical volume:
# $ mount | grep "on /tmp "
# If "/tmp" has its own partition or volume group, a line will be returned.
# If no line is returned, this is a finding.
#
# Fix Text:
#
# The "/tmp" directory is a world-writable directory used for temporary
# file storage. Ensure it has its own partition or logical volume at
# installation time, or migrate it using LVM.
#######################DISA INFORMATION##################################
#
# Global Variables
PDI=RHEL-06-000001
SEVERITY=low
#
#BEGIN_CHECK
. ./aqueduct_functions
MountCheck /tmp "$PDI: Mount point /tmp" $SEVERITY $CHECK
#END_CHECK
#BEGIN_REMEDY
#END_REMEDY