-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathRHEL-06-000007.sh
executable file
·73 lines (67 loc) · 2.58 KB
/
RHEL-06-000007.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
#!/bin/bash
#
##########################################################################
#Red Hat Enterprise Linux 6 - DISA STIG Compliance Remediation Content
#Copyright (C) 2013
#Vincent C. Passaro ([email protected])
#
##########################################################################
#
###################### Buddha Labs LLC ################################
# By Vincent C. Passaro #
# Buddha Labs LLC. #
# vince[@]buddhalabs[.]com #
# www.buddhalabs.com #
###################### Buddha Labs LLC ################################
#_________________________________________________________________________
# Version | Change Information | Author | Date
#-------------------------------------------------------------------------
# 1.0 | Initial Script Creation | Vincent Passaro | 1-JUNE-2013
#
#
#######################DISA INFORMATION##################################
# Group ID (Vulid): RHEL-06-000007
# Group Title: SRG-OS-999999
#
# Rule ID: RHEL-06-000007_rule
# Severity: low
# Rule Version (STIG-ID): RHEL-06-000007
# Rule Title: The system must use a separate file system for user home
# directories.
#
# Vulnerability Discussion: Ensuring that "/home" is mounted on its own
# partition enables the setting of more restrictive mount options, and also
# helps ensure that users cannot trivially fill partitions used for log or
# audit data storage.
#
# Responsibility:
# IAControls:
#
# Check Content:
#
# Run the following command to determine if "/home" is on its own
# partition or logical volume:
# $ mount | grep "on /home "
# If "/home" has its own partition or volume group, a line will be
# returned.
# If no line is returned, this is a finding.
#
# Fix Text:
#
# If user home directories will be stored locally, create a separate
# partition for "/home" at installation time (or migrate it later using
# LVM). If "/home" will be mounted from another system such as an NFS
# server, then creating a separate partition is not necessary at
# installation time, and the mountpoint can instead be configured later.
#######################DISA INFORMATION##################################
#
# Global Variables
PDI=RHEL-06-000007
SEVERITY=low
#
#BEGIN_CHECK
. ./aqueduct_functions
MountCheck /home "$PDI: Mount point /home" $SEVERITY $CHECK
#END_CHECK
#BEGIN_REMEDY
#END_REMEDY