From shawn at redhat.com Thu Aug 20 11:35:48 2015
Content-Type: multipart/mixed; boundary="===============4127197910202896451=="
MIME-Version: 1.0
From: Shawn Wells <shawn at redhat.com>
To: scap-security-guide at lists.fedorahosted.org
Subject: Re: [PATCH] correct several STIG/SSG mappings
Date: Fri, 15 Nov 2013 18:43:44 -0500
Message-ID: <5286B1B0.6070909@redhat.com>
In-Reply-To: 294970648F72F5468D5C8718139CA88005AA7E59@umechphi.easf.csd.disa.mil

--===============4127197910202896451==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

On 11/15/13, 2:16 PM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
> -	<overlay owner=3D"disastig" ruleid=3D"configure_auditd_admin_space_left=
_action" ownerid=3D"RHEL-06-000163" disa=3D"1343" severity=3D"medium">
> +	<overlay owner=3D"disastig" ruleid=3D"nonselected" ownerid=3D"RHEL-06-0=
00163" disa=3D"1343" severity=3D"medium">
>   		<title>The audit system must switch the system to single-user mode wh=
en available audit storage volume becomes dangerously low.</title>
>   	</overlay>

This is the only thing that caught my eye.

By moving to nonselected, will it no longer be required to switch into =

single user mode when /var/log/audit fills up?

 From a code perspective, ack.

--===============4127197910202896451==--