[PATCH 00/11] CCI Mapping changes based on list input

Jeffrey Blank blank at eclipse.ncsc.mil
Tue Jul 3 19:07:35 UTC 2012


Looks good to me / ACK.


On 07/02/2012 05:22 PM, Shawn Wells wrote:
> On 7/2/12 5:18 PM, Willy Santos wrote:
>> This batch of mappings are mostly "remaps" from requirement_unclear,
>> based on input received from the list (mostly Shawn, thanks!).
>>
>> Willy Santos (11):
>>    Changed mapping of CCI-000099 from requirement_unclear to
>>      met_inherently based on recommendation from Shawn Wells.
>>    Added mapping of CCI-000085 to auditd_configure_rules based on
>>      guidance from Shawn Wells.
>>    Remapped CCI-000025 from requirement_unclear to
>>      unmet_impractical_guidance, based on input from Shawn Wells.
>>    Remapped CCI-000026 from requirement_unclear to enabling_selinux,
>>      based on input from Shawn Wells.
>>    Remapped CCI-000027 from requirement_unclear to enable_iptables,
>>      based on input from Shawn Wells.
>>    Added Group unmet_impractical_product, as discussed with Jeff Blank,
>>      it was accidentally removed on an earlier commit.
>>    Remapped CCI-000028 from requirement_unclear to
>>      unmet_impractical_guidance and unmet_impractical_product, based on
>>      input from Shawn Wells.
>>    Remapped CCI-000029 from requirement_unclear to
>>      unmet_impractical_guidance and unmet_impractical_product, based on
>>      input from Shawn Wells.
>>    Remapped CCI-000030 from requirement_unclear to
>>      unmet_impractical_guidance and unmet_impractical_product, based on
>>      input from Shawn Wells.
>>    Remapped CCI-000032 from requirement_unclear to
>>      unmet_impractical_product, based on input from Shawn Wells.
>>    Remapped CCI-000024 from requirement_unclear to
>>      unmet_impractical_guidance and unmet_impractical_product, based on
>>      input from Shawn Wells.
>>
>>   rhel6/src/input/auxiliary/srg_support.xml   |   15 ++++++++++++---
>>   rhel6/src/input/system/auditing.xml         |    2 +-
>>   rhel6/src/input/system/network/iptables.xml |    2 +-
>>   rhel6/src/input/system/selinux.xml          |    1 +
>>   4 files changed, 15 insertions(+), 5 deletions(-)
>>
> 
> 
> 
> I acked patch 6, but I feel silly acking my own recommendations.
> 
> Jeff, Cliff, broader community, can you give sanity check?
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list