[PATCH 04/11] Remapped CCI-000026 from requirement_unclear to enabling_selinux, based on input from Shawn Wells.

Willy Santos wsantos at redhat.com
Mon Jul 2 21:18:20 UTC 2012


Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/auxiliary/srg_support.xml |    2 +-
 rhel6/src/input/system/selinux.xml        |    1 +
 2 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index d770310..550f5b7 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
 <description>
 It is unclear how to satisfy this requirement.
 </description>
-<ref disa="20,31,218,219,224,1097,24,26,27,28,29,30,32" />
+<ref disa="20,31,218,219,224,1097,24,27,28,29,30,32" />
 </Group> <!-- end requirement_unclear -->
 
 <Group id="new_rule_needed">
diff --git a/rhel6/src/input/system/selinux.xml b/rhel6/src/input/system/selinux.xml
index 3c361b4..b5b5f21 100644
--- a/rhel6/src/input/system/selinux.xml
+++ b/rhel6/src/input/system/selinux.xml
@@ -57,6 +57,7 @@ overridden by command-line arguments passed to the kernel. It is
 necessary to check <tt>grub.conf</tt> to ensure that this has not been done
 and to protect the boot process.
 </description>
+<ref disa="26"/>
 
 <Value id="var_selinux_state_name" type="string" operator="equals" interactive="0">
 <title>SELinux state</title>
-- 
1.7.7.6



More information about the scap-security-guide mailing list