[PATCH 00/25] More CCI Mappings

Willy Santos wsantos at redhat.com
Tue Jul 3 00:50:58 UTC 2012


More CCI mapping in support of the OS SRG compliance. This batch of CCI mappings were done with the help Cliff Trueman. As usual, these are open for discussion and change as necessary.


Willy Santos (25):
  Mapped CCI-000770 to new_rule_needed.
  Mapped CCI-001083 to met_inherently.
  Mapped CCI-001089 to met_inherently.
  Mapped CCI-000804 to unmet_impractical_guidance.
  Mapped CCI-001082 to met_inherently.
  Mapped CCI-001112 to unmet_impractical_guidance.
  Mapped CCI-001117 to enable_ip6tables and enable_iptables.
  Mapped CCI-000764 to unmet_impractical_guidance.
  Mapped CCIs 765, 766, 767 and 768 to new_rule_needed.
  Mapped CCIs 771 and 772 to new_rule_needed.
  Mapped CCIs 1009 and 1019 to new_rule_needed.
  Mapped CCI-000779 to ssh_server.
  Mapped CCI-000781 to ssh_server.
  Mapped CCI-000884 to new_rule_needed.
  Mapped CCI-000795 to account_disable_post_pw_expiration.
  Mapped CCI-000831 to enable_auditd_service.
  Mapped CCIs 1084, 1086 and 1087.
  Mapped CCI-001090 to enabling_selinux.
  Mapped CCI-001091 to enabling_selinux.
  Mapped CCI-001098 to enable_ip6tables and enable_iptables.
  Mapped CCI-001100 to enable_ip6tables and enable_iptables.
  Mapped CCI-001097 to enable_ip6tables and enable_iptables.
  Removed mapping of CCI-001092 from iptables_icmp_disabled, after some
    discussion with Jeff Blank and Cliff Trueman.
  Mapped CCIs 1092 and 1095 to set_sysctl_net_ipv4_tcp_syncookies.
  Mapped CCI-001111 to unmet_impractical_guidance.

 rhel6/src/input/auxiliary/srg_support.xml          |    6 +++---
 rhel6/src/input/services/ssh.xml                   |    2 +-
 .../accounts/restrictions/account_expiration.xml   |    2 +-
 rhel6/src/input/system/auditing.xml                |    2 +-
 rhel6/src/input/system/network/iptables.xml        |    6 +++---
 rhel6/src/input/system/network/kernel.xml          |    2 +-
 rhel6/src/input/system/selinux.xml                 |    2 +-
 7 files changed, 11 insertions(+), 11 deletions(-)

-- 
1.7.7.6



More information about the scap-security-guide mailing list