[PATCH 07/13] Added 800-53 refs for networking rules.

Willy Santos wsantos at redhat.com
Wed Apr 25 13:11:34 UTC 2012


From: Willy Santos <wsantos at redhat>


Signed-off-by: Willy Santos <wsantos at redhat>
---
 rhel6/src/input/system/network/network.xml |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/system/network/network.xml b/rhel6/src/input/system/network/network.xml
index 8c5763b..ad07930 100644
--- a/rhel6/src/input/system/network/network.xml
+++ b/rhel6/src/input/system/network/network.xml
@@ -24,6 +24,7 @@ If the system is a standalone machine with no need for network access or even co
 <rationale>The network interfaces expand the attack surface of a system. If they are not needed they should be disabled.</rationale>
 <!--<ident cce="TODO" />-->
 <!--TODO:MANUAL<oval id="network_disable_unused_interfaces" />-->
+<ref nist="CM-6, CM-7" />
 </Rule>
 
 <Rule id="network_disable_zeroconf">
@@ -34,6 +35,7 @@ If the system is a standalone machine with no need for network access or even co
 <rationale>Zeroconf addresses are in the network 169.254.0.0. The networking scripts add entries to the system’s routing table for these addresses. Zeroconf address assignment commonly occurs when the system is configured to use DHCP but fails to receive an address assignment from the DHCP server.</rationale>
 <ident cce="CCE-14054-1" />
 <oval id="sysconfig_nozeroconf_yes" />
+<ref nist="CM-6, CM-7" />
 </Rule>
 
 <Rule id="network_sniffer_disabled">
@@ -45,6 +47,7 @@ If the system is a standalone machine with no need for network access or even co
 </rationale>
 <ident cce="CCE-15013-6" />
 <oval id="network_sniffer_disabled" />
+<ref nist="CM-6, CM-7, MA-3" />
 </Rule>
 
 </Group>
-- 
1.7.7.6



More information about the scap-security-guide mailing list