SRG-OS-000008 |
CCI-000024 |
The operating system must prevent access to
organization-defined security-relevant information except
during secure, non-operable system states. |
Security-relevant information is any
information within the information system potentially
impacting the operation of security functions in a manner
that could result in failure to enforce the system security
policy or maintain isolation of code and data. Organizations
may define specific security relevant information requiring
protection. Filtering rules for routers and firewalls,
cryptographic key management information, key configuration
parameters for security services, and access control lists
are examples of security-relevant information. Secure,
non-operable system states are states in which the
information system is not performing
mission/business-related processing (e.g., the system is
off-line for maintenance, troubleshooting, boot-up,
shutdown). Access to these types of data is to be prevented
unless the system is in a maintenance mode or has otherwise
been brought off-line. The goal is to minimize the potential
that a security configuration or data may be dynamically and
perhaps surreptitiously overwritten or changed (without
going through a formal system change process documenting the
changes). |