On 6/29/12 5:45 PM, Willy Santos wrote:
CCI-000027 refers to enforcing dynamic information flow control based on policy upon changing conditions or operational considerations. This mapping is open to discussion and change.
||The operating system must enforce dynamic
information flow control based on policy that must allow or
disallow information flows based upon changing conditions or
||Information flow control regulates where
information is allowed to travel within an information
system and between information systems (as opposed to who is
allowed to access the information) and without explicit
regard to subsequent accesses to the information. The
operating system must enforce flow control decisions based
upon changing conditions.
Our security posture allows the dynamic adjustment of information
flows through the realtime configuration of IPTables as conditions
and operational considerations change. I'd map back to our