Bug 1463853 – [RFE] RHV-M appliance should meet NIST 800-53 partitioning requirements

Bug 1463853 - [RFE] RHV-M appliance should meet NIST 800-53 partitioning requirements [NEEDINFO]

Summary:	[RFE] RHV-M appliance should meet NIST 800-53 partitioning requirements

Status:	MODIFIED

Aliases:	None

Product:	Red Hat Enterprise Virtualization Manager
Classification:	Red Hat
Component:	rhevm-appliance (Show other bugs)
Sub Component:
Version:	4.1.2
Hardware:	Unspecified Linux

Priority	unspecified Severity high
Target Milestone:	ovirt-4.2.0
Target Release:	---
Assigned To:	Yuval Turgeman
QA Contact:	Pavel Stehlik
Docs Contact:

URL:
Whiteboard:
Keywords:	FutureFeature

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2017-06-21 20:10 EDT by Javier Coscia
Modified:	2017-08-17 02:04 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:
Doc Type:	Enhancement
Doc Text:	Feature: Modified disk partitioning scheme for RHVM-Appliance from 2 primary partitions ("/" and swap) to the one specified by NIST. Reason: Meet with NIST partitioning requirements Result: Updated disk partitions to be as follows: /boot 1G (primary) /home 1G (lvm) /tmp 2G (lvm) /var 20G (lvm) /var/log 10G (lvm) /var/log/audit 1G (lvm) swap 8G (lvm) / 6G (primary)
Story Points:	---
Clone Of:
Environment:
Last Closed:
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	Node
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Flags:	yturgema: needinfo? (sbonazzo)

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
oVirt gerrit	78926	master	MERGED	Build to meet NIST partitioning requirements	2017-08-01 07:54 EDT

Groups: None (edit)

Description Javier Coscia 2017-06-21 20:10:23 EDT

Description of the problem:

Customers in public sector need to meet certain security layouts, one of them
is the requirement of having separate partitions for the following directories

/home
/tmp
/var
/var/log/audit

Version-Release number of selected component (if applicable):

RHV-M appliance > rhvm-appliance-20170619.0-1.x86_64.rhevm.ova
RPM > rhevm-appliance-20170616.0-1.el7ev.noarch.rpm

How reproducible:
100%

Note You need to log in before you can comment on or make changes to this bug.