-
Notifications
You must be signed in to change notification settings - Fork 0
/
RHEL-06-000003.sh
executable file
·68 lines (62 loc) · 2.29 KB
/
RHEL-06-000003.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
#!/bin/bash
#
##########################################################################
#Red Hat Enterprise Linux 6 - DISA STIG Compliance Remediation Content
#Copyright (C) 2013
#Vincent C. Passaro ([email protected])
#
##########################################################################
#
###################### Buddha Labs LLC ################################
# By Vincent C. Passaro #
# Buddha Labs LLC. #
# vince[@]buddhalabs[.]com #
# www.buddhalabs.com #
###################### Buddha Labs LLC ################################
#_________________________________________________________________________
# Version | Change Information | Author | Date
#-------------------------------------------------------------------------
# 1.0 | Initial Script Creation | Vincent Passaro | 1-JUNE-2013
#
#
#######################DISA INFORMATION##################################
# Group ID (Vulid): RHEL-06-000003
# Group Title: SRG-OS-999999
#
# Rule ID: RHEL-06-000003_rule
# Severity: low
# Rule Version (STIG-ID): RHEL-06-000003
# Rule Title: The system must use a separate file system for /var/log.
#
# Vulnerability Discussion: Placing "/var/log" in its own partition
# enables better separation between log files and other files in "/var/".
#
# Responsibility:
# IAControls:
#
# Check Content:
#
# Run the following command to determine if "/var/log" is on its own
# partition or logical volume:
# $ mount | grep "on /var/log "
# If "/var/log" has its own partition or volume group, a line will be
# returned.
# If no line is returned, this is a finding.
#
# Fix Text:
#
# System logs are stored in the "/var/log" directory. Ensure that it has
# its own partition or logical volume at installation time, or migrate it
# using LVM.
#######################DISA INFORMATION##################################
#
# Global Variables
PDI=RHEL-06-000003
SEVERITY=low
#
#BEGIN_CHECK
. ./aqueduct_functions
MountCheck /var/log "$PDI: Mount point /var/log" $SEVERITY $CHECK
#END_CHECK
#BEGIN_REMEDY
#END_REMEDY