[PATCH 3/3] Created group and added prose for use of antivirus.

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Aug 7 14:21:55 UTC 2012


Definitely seemed like the right place to me.



On 08/07/2012 10:17 AM, Willy Santos wrote:
> Gotcha! I will make the changes.
> 
> How about where I put it? Does it make sense to put it in the integrity
> section? It took me a while to decide on it, but I'm still not
> completely sold on it being the right place for it. Thoughts?
> 
> -Willy
> 
> 
> On 08/07/2012 10:14 AM, Jeffrey Blank wrote:
>> This needs to be a Rule since it would be part of a STIG profile (even
>> though its check may be entirely manual for now (eventually OCIL).
>>
>>
>> On 08/07/2012 09:54 AM, Willy Santos wrote:
>>> Mapped antivirus group to CCI-1668 and removed mapping from
>>> impractical_product. Related ticket #84.
>>>
>>> Signed-off-by: Willy Santos <wsantos at redhat.com>
>>> ---
>>>   RHEL6/input/auxiliary/srg_support.xml     |    2 +-
>>>   RHEL6/input/system/software/integrity.xml |   14 ++++++++++++++
>>>   2 files changed, 15 insertions(+), 1 deletions(-)
>>>
>>> diff --git a/RHEL6/input/auxiliary/srg_support.xml
>>> b/RHEL6/input/auxiliary/srg_support.xml
>>> index 30da624..d04e823 100644
>>> --- a/RHEL6/input/auxiliary/srg_support.xml
>>> +++ b/RHEL6/input/auxiliary/srg_support.xml
>>> @@ -30,7 +30,7 @@ The requirement is impractical or out of scope.
>>>   The product does not meet this requirement.
>>>   The requirement is impractical or out of scope.
>>>   </description>
>>> -<ref disa="28,29,30,32,24,1695,1169,1170,1239,1662,1668,1395,553" />
>>> +<ref disa="28,29,30,32,24,1695,1169,1170,1239,1662,1395,553" />
>>>   </Group> <!-- end unmet_impractical_product -->
>>>     <Group id="requirement_unclear">
>>> diff --git a/RHEL6/input/system/software/integrity.xml
>>> b/RHEL6/input/system/software/integrity.xml
>>> index a5ec1bc..702bb0f 100644
>>> --- a/RHEL6/input/system/software/integrity.xml
>>> +++ b/RHEL6/input/system/software/integrity.xml
>>> @@ -178,4 +178,18 @@ on the system.</rationale>
>>>     </Group>
>>>   +<Group id="antivirus">
>>> +<title>Virus Scanning</title>
>>> +<description>Virus scanning software should be used to protect a
>>> system from penetration from
>>> +computer viruses and to limit their spread through intermediate
>>> systems. The virus scanning
>>> +software should be configured to perform scans dynamically on
>>> accessed files. If this capability
>>> +is not available, the system should be configured to scan, at a
>>> minimum, all altered files on
>>> +the system on a daily basis.
>>> +<br /><br />
>>> +Virus signature definition files should be updated frequently. It is
>>> recommended that definition
>>> +files be updated at least every 7 days.
>>> +</description>
>>> +<ref disa="1668"/>
>>> +</Group>
>>> +
>>>   </Group>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> 
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

-- 
___________________________
Jeffrey Blank
410-854-8675
Technology and Systems Analysis / Network Components
NSA Information Assurance


More information about the scap-security-guide mailing list