On 6/27/12 6:18 PM, Willy Santos wrote:
> Signed-off-by: Willy Santos<wsantos(a)redhat.com>
> ---
> rhel6/src/input/auxiliary/srg_support.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml
b/rhel6/src/input/auxiliary/srg_support.xml
> index 138fe05..c070e02 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
> <description>
> It is unclear how to satisfy this requirement.
> </description>
> -<ref disa="20,31,218,219,224" />
> +<ref disa="20,31,218,219,224,386" />
> </Group> <!-- end unmet_impractical_product -->
>
> <Group id="new_rule_needed">
SRG-OS-000097 CCI-000386 The operating system must employ automated
mechanisms to prevent program execution in accordance with the
organization defined specifications.
I wouldn't think to hard about this one. I would argue that the OS
provides the mechanisms for this by default through DAC policies (DAC
policies being the "organization defined" piece).
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide
Agreed. I'll make the change.
-Willy