>From f61cf24e0f6d9d074d5229abeb6e5e553a6e0c2b Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 16 May 2012 12:09:20 -0400 Subject: [PATCH 01/11] Mapped CCI-000066 to unmet_impractical_guidance 66 requires the OS to meet organizational defined policies for remote connections to the information system. As these requirements will be organizationally defined we're unable to create prose against them. At some point in the future we may create guidance for such remote connections, however until then I'm mapping this to unmet. --- rhel6/src/input/auxiliary/srg_support.xml | 14 ++++++++++++++ 1 files changed, 14 insertions(+), 0 deletions(-) diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml index de24ea5..ff0ac6e 100644 --- a/rhel6/src/input/auxiliary/srg_support.xml +++ b/rhel6/src/input/auxiliary/srg_support.xml @@ -23,6 +23,20 @@ The guidance does not meet this requirement. The requirement is impractical or out of scope. + + +The operating system must enforce requirements for remote connections to the information system +The organization will define the requirements for connection of remote connections. In order +to ensure the connection provides adequate integrity and confidentiality of the connection, the operating system must enforce these requirements. + +The technical specifications to meet this policy are organizationally defined, and therefor generic guidance is not availabile. + + + + + + +