More CCI mappings in support of the OS SRG compliance efforts. Note that any mapping to
requirement_unclear is meant for discussion by the group and all suggestions are welcome.
Willy Santos (26):
Changed mapping of CCI-000386 from requirement_unclear to
met_inherently as suggested by Shawn Wells.
Removed mapping of CCI-001092 from requirement_unclear, based on
discussion/input from Shawn Wells.
Mapped CCI-001092 to iptables_icmp_disabled and enable_iptables
enable_ip6tables.
Mapped CCI-001092 to password_retry.
Mapped CCI-000024 to requirement_unclear.
Mapped CCI-000025 to requirement_unclear.
Mapped CCI-000026 to requirement_unclear.
Mapped CCI-000027 to requirement_unclear.
Mapped CCI-000028 to requirement_unclear.
Mapped CCI-000029 to requirement_unclear.
Mapped CCI-000030 to requirement_unclear.
Mapped CCI-000032 to requirement_unclear.
Mapped CCI-00034 to met_inherently.
Mapped CCI-00035 to met_inherently.
Mapped CCI-001250 to gconf_gnome_disable_automount.
Mapped CCI-000085 to gconf_gnome_disable_automount.
Mapped CCI-000085 to service_autofs_disabled.
Mapped CCI-000085 to bios_disable_usb_boot.
Mapped CCI-000085 to bootloader_nousb_argument.
Mapped CCI-000085 to kernel_module_usb-storage_removed.
Mapped CCI-000085 to gconf_gnome_disable_automount.
Mapped CCI-000099 to requirement_unclear.
Mapped CCI-000157 to met_inherently.
Mapped CCI-000185 to network_ssl_enable_client_support.
Made changes requested by Jeff Blank to accommodate changes made on
his commit.
Mapped CCI-000186 to met_inherently.
rhel6/src/input/auxiliary/srg_support.xml | 10 +++++-----
rhel6/src/input/system/accounts/pam.xml | 2 +-
rhel6/src/input/system/network/iptables.xml | 6 +++---
rhel6/src/input/system/network/ssl.xml | 2 +-
rhel6/src/input/system/permissions/mounting.xml | 12 ++++++------
5 files changed, 16 insertions(+), 16 deletions(-)
--
1.7.7.6
Show replies by date