[PATCH 00/11] CCI Mapping changes based on list input

Shawn Wells shawn at redhat.com
Mon Jul 2 21:22:25 UTC 2012


On 7/2/12 5:18 PM, Willy Santos wrote:
> This batch of mappings are mostly "remaps" from requirement_unclear, based on input received from the list (mostly Shawn, thanks!).
>
> Willy Santos (11):
>    Changed mapping of CCI-000099 from requirement_unclear to
>      met_inherently based on recommendation from Shawn Wells.
>    Added mapping of CCI-000085 to auditd_configure_rules based on
>      guidance from Shawn Wells.
>    Remapped CCI-000025 from requirement_unclear to
>      unmet_impractical_guidance, based on input from Shawn Wells.
>    Remapped CCI-000026 from requirement_unclear to enabling_selinux,
>      based on input from Shawn Wells.
>    Remapped CCI-000027 from requirement_unclear to enable_iptables,
>      based on input from Shawn Wells.
>    Added Group unmet_impractical_product, as discussed with Jeff Blank,
>      it was accidentally removed on an earlier commit.
>    Remapped CCI-000028 from requirement_unclear to
>      unmet_impractical_guidance and unmet_impractical_product, based on
>      input from Shawn Wells.
>    Remapped CCI-000029 from requirement_unclear to
>      unmet_impractical_guidance and unmet_impractical_product, based on
>      input from Shawn Wells.
>    Remapped CCI-000030 from requirement_unclear to
>      unmet_impractical_guidance and unmet_impractical_product, based on
>      input from Shawn Wells.
>    Remapped CCI-000032 from requirement_unclear to
>      unmet_impractical_product, based on input from Shawn Wells.
>    Remapped CCI-000024 from requirement_unclear to
>      unmet_impractical_guidance and unmet_impractical_product, based on
>      input from Shawn Wells.
>
>   rhel6/src/input/auxiliary/srg_support.xml   |   15 ++++++++++++---
>   rhel6/src/input/system/auditing.xml         |    2 +-
>   rhel6/src/input/system/network/iptables.xml |    2 +-
>   rhel6/src/input/system/selinux.xml          |    1 +
>   4 files changed, 15 insertions(+), 5 deletions(-)
>



I acked patch 6, but I feel silly acking my own recommendations.

Jeff, Cliff, broader community, can you give sanity check?


More information about the scap-security-guide mailing list