[PATCH 01/13] Added 800-53 refs to Avahi rules.

Willy Santos wsantos at redhat.com
Wed Apr 25 13:11:28 UTC 2012


From: Willy Santos <wsantos at redhat>


Signed-off-by: Willy Santos <wsantos at redhat>
---
 rhel6/src/input/services/avahi.xml |    5 +++++
 1 files changed, 5 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/services/avahi.xml b/rhel6/src/input/services/avahi.xml
index f6820eb..ea14fc2 100644
--- a/rhel6/src/input/services/avahi.xml
+++ b/rhel6/src/input/services/avahi.xml
@@ -55,6 +55,7 @@ the following line exists in the <tt>[server]</tt> section:
 Similarly, if you are using only IPv6, disable IPv4 sockets with the line:
 <pre>use-ipv4=no</pre>
 </description>
+<ref nist="CM-6, CM-7" />
 </Rule>
 
 
@@ -74,6 +75,7 @@ properly-configured router or firewall should not allow mDNS packets into
 the local network at all, this option provides another check to ensure they
 are not permitted.
 </rationale>
+<ref nist="AC-4, CM-6, CM-7" />
 </Rule>
 
 
@@ -88,6 +90,7 @@ and ensure the following line appears in the <tt>[server]</tt> section:
 This helps ensure that only Avahi is responsible for mDNS traffic coming from
 that port on the system.
 </rationale>
+<ref nist="AC-4, CM-6, CM-7" />
 </Rule>
 
 
@@ -102,6 +105,7 @@ and ensure the following line appears in the <tt>[server]</tt> section:
 This helps ensure that only Avahi is responsible for mDNS traffic coming from
 that port on the system.
 </rationale>
+<ref nist="AC-4, CM-6, CM-7" />
 </Rule>
 
 
@@ -131,6 +135,7 @@ disable-publishing. Alternatively, these can be used to restrict
 the types of published information in the event that some information
 must be published.
 </rationale>
+<ref nist="AC-4, CM-6, CM-7" />
 </Rule>
 
 </Group>
-- 
1.7.7.6



More information about the scap-security-guide mailing list