CCI-000029 requires enforcing org-defined limitations on embedding of data within other data types. This mapping is open to discussion and change.
SRG-OS-000013 | CCI-000029 | The operating system must enforce organization-defined limitations on the embedding of data types within other data types. | Embedding of data within other data is often used for the clandestine transfer of data. Embedding of data within other data can circumvent protections in place to protect information and systems. |