>From dad807682de5dac7b61613be7004e5da896dc3ef Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 11 Jan 2013 02:19:40 -0500 Subject: [PATCH 17/20] Mapped CM-7 CM-7 calls for the system to provide only essential capabilities, and restrict defined functions, ports, protocols, and services. Removed a few existing CM-7 mappings to follow the above interpretation, added others. --- RHEL6/input/auxiliary/nist_support.xml | 2 +- RHEL6/input/profiles/nist-CL-IL-AL.xml | 95 +++++++++++++++++++- RHEL6/input/services/avahi.xml | 9 -- RHEL6/input/services/base.xml | 17 +--- RHEL6/input/services/cron.xml | 4 +- RHEL6/input/services/dhcp.xml | 11 +-- RHEL6/input/services/dns.xml | 16 ++-- RHEL6/input/services/ldap.xml | 10 +- RHEL6/input/services/mail.xml | 5 +- RHEL6/input/services/obsolete.xml | 30 +++---- RHEL6/input/services/printing.xml | 3 +- RHEL6/input/system/accounts/physical.xml | 17 ++-- .../accounts/restrictions/password_expiration.xml | 7 +- .../system/accounts/restrictions/root_logins.xml | 6 +- RHEL6/input/system/accounts/session.xml | 12 ++-- RHEL6/input/system/network/iptables.xml | 16 ++-- RHEL6/input/system/network/ipv6.xml | 6 +- RHEL6/input/system/network/kernel.xml | 30 +++---- RHEL6/input/system/network/network.xml | 2 +- RHEL6/input/system/network/uncommon.xml | 3 - RHEL6/input/system/permissions/execution.xml | 7 +- RHEL6/input/system/permissions/files.xml | 4 +- RHEL6/input/system/permissions/mounting.xml | 16 ++-- RHEL6/input/system/permissions/partitions.xml | 2 +- RHEL6/input/system/selinux.xml | 2 +- 25 files changed, 190 insertions(+), 142 deletions(-) diff --git a/RHEL6/input/auxiliary/nist_support.xml b/RHEL6/input/auxiliary/nist_support.xml index 538c443..e33cb7b 100644 --- a/RHEL6/input/auxiliary/nist_support.xml +++ b/RHEL6/input/auxiliary/nist_support.xml @@ -14,7 +14,7 @@ automated means. This requirement is procedural, and can not be met through automated means. - + diff --git a/RHEL6/input/profiles/nist-CL-IL-AL.xml b/RHEL6/input/profiles/nist-CL-IL-AL.xml index 52091f0..2b703ec 100644 --- a/RHEL6/input/profiles/nist-CL-IL-AL.xml +++ b/RHEL6/input/profiles/nist-CL-IL-AL.xml @@ -25,6 +25,12 @@ assurance." + + + + @@ -79,6 +85,13 @@ assurance." + + + + + + + @@ -206,6 +219,8 @@ assurance." + @@ -269,6 +284,8 @@ assurance." + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +