[PATCH 05/11] Remapped CCI-000027 from requirement_unclear to enable_iptables, based on input from Shawn Wells.

Willy Santos wsantos at redhat.com
Mon Jul 2 21:18:21 UTC 2012


Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/auxiliary/srg_support.xml   |    2 +-
 rhel6/src/input/system/network/iptables.xml |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 550f5b7..da0a785 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
 <description>
 It is unclear how to satisfy this requirement.
 </description>
-<ref disa="20,31,218,219,224,1097,24,27,28,29,30,32" />
+<ref disa="20,31,218,219,224,1097,24,28,29,30,32" />
 </Group> <!-- end requirement_unclear -->
 
 <Group id="new_rule_needed">
diff --git a/rhel6/src/input/system/network/iptables.xml b/rhel6/src/input/system/network/iptables.xml
index df8f390..b3f798b 100644
--- a/rhel6/src/input/system/network/iptables.xml
+++ b/rhel6/src/input/system/network/iptables.xml
@@ -95,7 +95,7 @@ capability for IPv4 and ICMP.
 </rationale>
 <ident cce="4189-7" />
 <oval id="service_iptables_enabled" />
-<ref nist="CM-6, CM-7" disa="1115,1118,1092" />
+<ref nist="CM-6, CM-7" disa="1115,1118,1092,27" />
 </Rule>
 </Group><!--<Group id="iptables_activation">-->
 
-- 
1.7.7.6



More information about the scap-security-guide mailing list