[PATCH 2/6] Removed CCI references from Group tag and added to appropriate Rule tag.
Michele Newman
mnewman at redhat.com
Mon Dec 17 04:38:08 UTC 2012
---
RHEL6/input/system/network/iptables.xml | 3 +--
1 files changed, 1 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/system/network/iptables.xml b/RHEL6/input/system/network/iptables.xml
index 40f1746..f929da9 100644
--- a/RHEL6/input/system/network/iptables.xml
+++ b/RHEL6/input/system/network/iptables.xml
@@ -18,7 +18,6 @@ the iptables and ip6tables configurations included with the system.
For more complete information that may allow the construction of a
sophisticated ruleset tailored to your environment, please consult
the references at the end of this section.</description>
-<ref disa="66,86" />
<Group id="iptables_activation">
<title>Inspect and Activate Default Rules</title>
@@ -60,7 +59,7 @@ capability for IPv6 and ICMPv6.
</rationale>
<ident cce="4167-3" />
<oval id="service_ip6tables_enabled" />
-<ref nist="CM-6, CM-7" disa="66,1115,1118,1092,1117,1098,1100,1097,1123,1124,1414"/>
+<ref nist="CM-6, CM-7" disa="66,86,1115,1118,1092,1117,1098,1100,1097,1123,1124,1414"/>
<tested by="DS" on="20121024"/>
</Rule>
--
1.7.1
More information about the scap-security-guide
mailing list