>From 22ac728392a4ab4c88c8a02842be7988ab1f4214 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Tue, 25 Dec 2012 16:18:32 -0500 Subject: [PATCH 07/17] Removed AC-3 mapping against various rules AC-3 states that DAC and MAC systems must be enabled, and that FIPS used whenever possible. It does *not* call out file permissions, network firewalls, etc... those things are set later (e.g. CM-6, SC-*). --- RHEL6/input/system/accounts/banners.xml | 6 ++-- RHEL6/input/system/accounts/physical.xml | 12 ++++---- .../accounts/restrictions/password_expiration.xml | 6 ++-- .../accounts/restrictions/password_storage.xml | 2 +- .../system/accounts/restrictions/root_logins.xml | 6 ++-- RHEL6/input/system/accounts/session.xml | 2 +- RHEL6/input/system/logging.xml | 8 ++-- RHEL6/input/system/network/kernel.xml | 6 ++-- RHEL6/input/system/network/ssl.xml | 8 ++-- RHEL6/input/system/permissions/execution.xml | 4 +- RHEL6/input/system/permissions/files.xml | 32 ++++++++++---------- RHEL6/input/system/software/integrity.xml | 2 +- 12 files changed, 47 insertions(+), 47 deletions(-) diff --git a/RHEL6/input/system/accounts/banners.xml b/RHEL6/input/system/accounts/banners.xml index 157edc8..b0e087e 100644 --- a/RHEL6/input/system/accounts/banners.xml +++ b/RHEL6/input/system/accounts/banners.xml @@ -79,7 +79,7 @@ process and facilitates possible legal action against attackers.