>From f9ae6d94385a32f4931d287c3555cf4418143d56 Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Thu, 10 Jan 2013 08:24:11 -0500 Subject: [PATCH 08/20] Mapped AU-9 AU-9: Secure file permissions of audit data. We already had the chmod/chown set, added selinux AU-9(4)(a): Calls for least priv. regarding access to audit data AU-9(4)(b): Protect non-local access data, which is native behavior --- RHEL6/input/auxiliary/nist_support.xml | 2 +- RHEL6/input/intro/intro.xml | 2 +- RHEL6/input/profiles/nist-CL-IL-AL.xml | 2 -- RHEL6/input/system/selinux.xml | 14 ++++++-------- 4 files changed, 8 insertions(+), 12 deletions(-) diff --git a/RHEL6/input/auxiliary/nist_support.xml b/RHEL6/input/auxiliary/nist_support.xml index 364b06a..563f514 100644 --- a/RHEL6/input/auxiliary/nist_support.xml +++ b/RHEL6/input/auxiliary/nist_support.xml @@ -36,7 +36,7 @@ compliance. This is a permanent not a finding. This requirement is permanent not a finding. No fix is required. - + diff --git a/RHEL6/input/intro/intro.xml b/RHEL6/input/intro/intro.xml index 06abd93..eccd302 100644 --- a/RHEL6/input/intro/intro.xml +++ b/RHEL6/input/intro/intro.xml @@ -94,7 +94,7 @@ least privilege: SELinux policy can confine software to perform only actions on system that are specifically allowed. This can be far more restrictive than the actions permissible by the traditional Unix permissions model. - + diff --git a/RHEL6/input/profiles/nist-CL-IL-AL.xml b/RHEL6/input/profiles/nist-CL-IL-AL.xml index c865cac..e375c4b 100644 --- a/RHEL6/input/profiles/nist-CL-IL-AL.xml +++ b/RHEL6/input/profiles/nist-CL-IL-AL.xml @@ -271,8 +271,6 @@ assurance."