<def-group>
  <definition class="compliance" id="mount_option_dev_shm_nosuid" version="1">
    <metadata>
      <title>Add nosuid Option to /dev/shm</title>
      <affected family="unix">
        <platform>Red Hat Enterprise Linux 6</platform>
      </affected>
      <description>The nosuid mount option should be set for temporary storage
      partitions such as /dev/shm. The suid/sgid permissions should not be
      required in these world-writable directories.</description>
      <reference source="MED" ref_id="20130821" ref_url="test_attestation" />
    </metadata>
    <criteria>
      <criterion comment="nosuid on /dev/shm" test_ref="test_nosuid_dev_shm" />
    </criteria>
  </definition>
  <linux:partition_test check="all" check_existence="all_exist"
  id="test_nosuid_dev_shm" version="1" comment="nosuid on /dev/shm">
    <linux:object object_ref="object_dev_shm_partition_nosuid" />
    <linux:state state_ref="state_dev_shm_nosuid" />
  </linux:partition_test>
  <linux:partition_object id="object_dev_shm_partition_nosuid" version="1">
    <linux:mount_point>/dev/shm</linux:mount_point>
  </linux:partition_object>
  <linux:partition_state id="state_dev_shm_nosuid" version="1">
    <linux:mount_options datatype="string" entity_check="at least one"
    operation="equals">nosuid</linux:mount_options>
  </linux:partition_state>
</def-group>
