[PATCH 05/11] Remapped CCI-000027 from requirement_unclear to enable_iptables, based on input from Shawn Wells.
Willy Santos
wsantos at redhat.com
Mon Jul 2 21:18:21 UTC 2012
Signed-off-by: Willy Santos <wsantos at redhat.com>
---
rhel6/src/input/auxiliary/srg_support.xml | 2 +-
rhel6/src/input/system/network/iptables.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 550f5b7..da0a785 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
<description>
It is unclear how to satisfy this requirement.
</description>
-<ref disa="20,31,218,219,224,1097,24,27,28,29,30,32" />
+<ref disa="20,31,218,219,224,1097,24,28,29,30,32" />
</Group> <!-- end requirement_unclear -->
<Group id="new_rule_needed">
diff --git a/rhel6/src/input/system/network/iptables.xml b/rhel6/src/input/system/network/iptables.xml
index df8f390..b3f798b 100644
--- a/rhel6/src/input/system/network/iptables.xml
+++ b/rhel6/src/input/system/network/iptables.xml
@@ -95,7 +95,7 @@ capability for IPv4 and ICMP.
</rationale>
<ident cce="4189-7" />
<oval id="service_iptables_enabled" />
-<ref nist="CM-6, CM-7" disa="1115,1118,1092" />
+<ref nist="CM-6, CM-7" disa="1115,1118,1092,27" />
</Rule>
</Group><!--<Group id="iptables_activation">-->
--
1.7.7.6
More information about the scap-security-guide
mailing list