Hide Forgot
Description of problem: Attempting to perform new installs of RHEL7.2, and when choosing the "Pre-release Draft STIG for Redhat Linux 7 server", there is no automatic partitions created for /tmp, /home, /var, /var/log, or /var/log/audit. Version-Release number of selected component (if applicable): 7.2 How reproducible: Every time Steps to Reproduce: 1. Select "Pre-release Draft STIG for Redhat Linux 7 server" 2. Select "Automatic Partitioning" 3. Select "Install" Actual results: Only / partition is created Expected results: Partitions are created for /, /tmp/, /home/, /var/, /var/log/, & /var/log/audit/ Additional info: NOTE: This may be a problem with the delivered STIG not including the command to "fix" the partitioning, but not sure if the oscap anaconda addon would support it if it did.
Unfortunately, there's no way to create those partitions automatically because their sizes differ a lot with different use cases and storage configurations/setups/options.
I think the idea here was to verify that user defines compliant partitioning. And the plug-in can suggest to user that the partitioning selected is not compliant. There is that a documentation for that feature at http://www.open-scap.org/tools/oscap-anaconda-addon/doc/ Section 2.1. Partitioning rules The problem is however, that scap-security-guide/STIG does not contain these rules. Vratislav, do you think we should have a bug against scap-security-guide to supply these rules?
(In reply to Šimon Lukašík from comment #3) > I think the idea here was to verify that user defines compliant > partitioning. And the plug-in can suggest to user that the partitioning > selected is not compliant. > > There is that a documentation for that feature at > > http://www.open-scap.org/tools/oscap-anaconda-addon/doc/ > Section 2.1. Partitioning rules > > The problem is however, that scap-security-guide/STIG does not contain these > rules. Vratislav, do you think we should have a bug against > scap-security-guide to supply these rules? Yes please, it would definitely make user experience better.