[PATCH 2/6] Removed CCI references from Group tag and added to appropriate Rule tag.

Michele Newman mnewman at redhat.com
Mon Dec 17 04:38:08 UTC 2012


---
 RHEL6/input/system/network/iptables.xml |    3 +--
 1 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/system/network/iptables.xml b/RHEL6/input/system/network/iptables.xml
index 40f1746..f929da9 100644
--- a/RHEL6/input/system/network/iptables.xml
+++ b/RHEL6/input/system/network/iptables.xml
@@ -18,7 +18,6 @@ the iptables and ip6tables configurations included with the system.
 For more complete information that may allow the construction of a
 sophisticated ruleset tailored to your environment, please consult
 the references at the end of this section.</description>
-<ref disa="66,86" />
 
 <Group id="iptables_activation">
 <title>Inspect and Activate Default Rules</title>
@@ -60,7 +59,7 @@ capability for IPv6 and ICMPv6.
 </rationale>
 <ident cce="4167-3" />
 <oval id="service_ip6tables_enabled" />
-<ref nist="CM-6, CM-7" disa="66,1115,1118,1092,1117,1098,1100,1097,1123,1124,1414"/>
+<ref nist="CM-6, CM-7" disa="66,86,1115,1118,1092,1117,1098,1100,1097,1123,1124,1414"/>
 <tested by="DS" on="20121024"/>
 </Rule>
 
-- 
1.7.1



More information about the scap-security-guide mailing list