[PATCH 00/11] CCI Mapping changes based on list input
Jeffrey Blank
blank at eclipse.ncsc.mil
Tue Jul 3 19:07:35 UTC 2012
Looks good to me / ACK.
On 07/02/2012 05:22 PM, Shawn Wells wrote:
> On 7/2/12 5:18 PM, Willy Santos wrote:
>> This batch of mappings are mostly "remaps" from requirement_unclear,
>> based on input received from the list (mostly Shawn, thanks!).
>>
>> Willy Santos (11):
>> Changed mapping of CCI-000099 from requirement_unclear to
>> met_inherently based on recommendation from Shawn Wells.
>> Added mapping of CCI-000085 to auditd_configure_rules based on
>> guidance from Shawn Wells.
>> Remapped CCI-000025 from requirement_unclear to
>> unmet_impractical_guidance, based on input from Shawn Wells.
>> Remapped CCI-000026 from requirement_unclear to enabling_selinux,
>> based on input from Shawn Wells.
>> Remapped CCI-000027 from requirement_unclear to enable_iptables,
>> based on input from Shawn Wells.
>> Added Group unmet_impractical_product, as discussed with Jeff Blank,
>> it was accidentally removed on an earlier commit.
>> Remapped CCI-000028 from requirement_unclear to
>> unmet_impractical_guidance and unmet_impractical_product, based on
>> input from Shawn Wells.
>> Remapped CCI-000029 from requirement_unclear to
>> unmet_impractical_guidance and unmet_impractical_product, based on
>> input from Shawn Wells.
>> Remapped CCI-000030 from requirement_unclear to
>> unmet_impractical_guidance and unmet_impractical_product, based on
>> input from Shawn Wells.
>> Remapped CCI-000032 from requirement_unclear to
>> unmet_impractical_product, based on input from Shawn Wells.
>> Remapped CCI-000024 from requirement_unclear to
>> unmet_impractical_guidance and unmet_impractical_product, based on
>> input from Shawn Wells.
>>
>> rhel6/src/input/auxiliary/srg_support.xml | 15 ++++++++++++---
>> rhel6/src/input/system/auditing.xml | 2 +-
>> rhel6/src/input/system/network/iptables.xml | 2 +-
>> rhel6/src/input/system/selinux.xml | 1 +
>> 4 files changed, 15 insertions(+), 5 deletions(-)
>>
>
>
>
> I acked patch 6, but I feel silly acking my own recommendations.
>
> Jeff, Cliff, broader community, can you give sanity check?
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/scap-security-guide
More information about the scap-security-guide
mailing list