On 6/29/12 5:45 PM, Willy Santos wrote:
CCI-000027 refers to enforcing dynamic information flow control based on policy upon changing conditions or operational considerations. This mapping is open to discussion and change.


SRG-OS-000011 CCI-000027 The operating system must enforce dynamic information flow control based on policy that must allow or disallow information flows based upon changing conditions or operational considerations. Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information) and without explicit regard to subsequent accesses to the information. The operating system must enforce flow control decisions based upon changing conditions.

Our security posture allows the dynamic adjustment of information flows through the realtime configuration of IPTables as conditions and operational considerations change. I'd map back to our enable_iptables group.