>From 7792e8e31a771ecea5736d279882bf8e0d057527 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Wed, 16 May 2012 15:41:56 -0400 Subject: [PATCH 11/11] Mapped CCI-001693 to enforce_DAC_access_rights This CCI requires DAC policy which limits propagation of access rights, which is the default behavior of Linux DAC systems --- rhel6/src/input/auxiliary/srg_support.xml | 7 ++++++- 1 files changed, 6 insertions(+), 1 deletions(-) diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml index 563d370..2294804 100644 --- a/rhel6/src/input/auxiliary/srg_support.xml +++ b/rhel6/src/input/auxiliary/srg_support.xml @@ -29,10 +29,15 @@ Red Hat Enterprise Linux meets this requirement by design. The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user -testing.... +Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured. + +The operating system must enforce a Discretionary Access Control (DAC) policy that limits propagation of access rights. +Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured. + +