[PATCH 17/25] Mapped CCIs 1084, 1086 and 1087.

Willy Santos wsantos at redhat.com
Tue Jul 3 00:51:15 UTC 2012


The referenced CCIs refer to isolating security functions from other security functions and non-security functions. Using SELinux meets these requirement.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/system/selinux.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/selinux.xml b/rhel6/src/input/system/selinux.xml
index b5b5f21..bb184bd 100644
--- a/rhel6/src/input/system/selinux.xml
+++ b/rhel6/src/input/system/selinux.xml
@@ -57,7 +57,7 @@ overridden by command-line arguments passed to the kernel. It is
 necessary to check <tt>grub.conf</tt> to ensure that this has not been done
 and to protect the boot process.
 </description>
-<ref disa="26"/>
+<ref disa="26,1084,1086,1087"/>
 
 <Value id="var_selinux_state_name" type="string" operator="equals" interactive="0">
 <title>SELinux state</title>
-- 
1.7.7.6



More information about the scap-security-guide mailing list