<?xml version="1.0" encoding="UTF-8"?>
<oval_definitions xmlns="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval-def="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:ind-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#independent" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:lin-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#linux" xmlns:unix-def="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix">
<generator>
<oval:product_name>vim, emacs</oval:product_name>
<oval:schema_version>5.5</oval:schema_version>
<oval:timestamp>2010-08-30T12:00:00-04:00</oval:timestamp>
</generator>
<definitions>
<definition class="compliance" id="oval:org.open-scap.f14:def:20001" version="1">
<metadata>
<title>Ensure that /tmp has its own partition or logical volume</title>
<reference ref_id="TBD" source="CCE"/>
<description>The /tmp directory is a world-writable directory used for temporary file storage. Verify that it has its own partition or logical volume.</description>
</metadata>
<criteria>
<criterion comment="Check in /etc/fstab for a /tmp mount point" test_ref="oval:org.open-scap.f14:tst:20001"/>
</criteria>
</definition>
</definitions>
<tests>
<ind-def:textfilecontent54_test check="only one" check_existence="at_least_one_exists" comment="look for /tmp partition or logical volume in /etc/fstab" id="oval:org.open-scap.f14:tst:20001" version="1">
<ind-def:object object_ref="oval:org.open-scap.f14:obj:20001"/>
<ind-def:state state_ref="oval:org.open-scap.f14:ste:20001"/>
</ind-def:textfilecontent54_test>
</tests>
<objects>
<ind-def:textfilecontent54_object comment="look for the partition mount point in /etc/fstab" id="oval:org.open-scap.f14:obj:20001" version="1">
<ind-def:path>/etc</ind-def:path>
<ind-def:filename>fstab</ind-def:filename>
<ind-def:pattern operation="pattern match">^[[:space:]]*[^[:space:]]+[[:space:]]+([^[:space:]]+)[[:space:]]+[^[:space:]]+[[:space:]]+[^[:space:]]+[[:space:]]+[^[:space:]]+[[:space:]]+[^[:space:]]+</ind-def:pattern>
<!-- <ind-def:pattern operation="pattern match">^[\s]*[\S]+[\s]+([\S]+)[\s]+[\S]+[\s]+[\S]+[\s]+[\S]+[\s]+[\S]+</ind-def:pattern> -->
<ind-def:instance datatype="int" operation="greater than or equal">1</ind-def:instance>
</ind-def:textfilecontent54_object>
</objects>
<states>
<ind-def:textfilecontent54_state comment="/tmp mount point is defined" id="oval:org.open-scap.f14:ste:20001" version="1">
<ind-def:subexpression datatype="string" entity_check="all" operation="equals">/tmp</ind-def:subexpression>
</ind-def:textfilecontent54_state>
</states>
</oval_definitions>