[PATCH 04/11] Remapped CCI-000026 from requirement_unclear to enabling_selinux, based on input from Shawn Wells.
Willy Santos
wsantos at redhat.com
Mon Jul 2 21:18:20 UTC 2012
Signed-off-by: Willy Santos <wsantos at redhat.com>
---
rhel6/src/input/auxiliary/srg_support.xml | 2 +-
rhel6/src/input/system/selinux.xml | 1 +
2 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index d770310..550f5b7 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
<description>
It is unclear how to satisfy this requirement.
</description>
-<ref disa="20,31,218,219,224,1097,24,26,27,28,29,30,32" />
+<ref disa="20,31,218,219,224,1097,24,27,28,29,30,32" />
</Group> <!-- end requirement_unclear -->
<Group id="new_rule_needed">
diff --git a/rhel6/src/input/system/selinux.xml b/rhel6/src/input/system/selinux.xml
index 3c361b4..b5b5f21 100644
--- a/rhel6/src/input/system/selinux.xml
+++ b/rhel6/src/input/system/selinux.xml
@@ -57,6 +57,7 @@ overridden by command-line arguments passed to the kernel. It is
necessary to check <tt>grub.conf</tt> to ensure that this has not been done
and to protect the boot process.
</description>
+<ref disa="26"/>
<Value id="var_selinux_state_name" type="string" operator="equals" interactive="0">
<title>SELinux state</title>
--
1.7.7.6
More information about the scap-security-guide
mailing list