On 06/27/2012 06:25 PM, Shawn Wells wrote:
On 6/27/12 6:18 PM, Willy Santos wrote:
Signed-off-by: Willy Santos <wsantos@redhat.com>
---
 rhel6/src/input/auxiliary/srg_support.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 138fe05..c070e02 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
 <description>
 It is unclear how to satisfy this requirement.
 </description>
-<ref disa="20,31,218,219,224" />
+<ref disa="20,31,218,219,224,386" />
 </Group> <!-- end unmet_impractical_product -->
 
 <Group id="new_rule_needed">



SRG-OS-000097 CCI-000386 The operating system must employ automated mechanisms to prevent program execution in accordance with the organization defined specifications.

I wouldn't think to hard about this one. I would argue that the OS provides the mechanisms for this by default through DAC policies (DAC policies being the "organization defined" piece).


_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/scap-security-guide

Agreed. I'll make the change.
-Willy