[PATCH 00/21] More CCI Mappings

Willy Santos wsantos at redhat.com
Tue Jul 3 22:52:20 UTC 2012


More CCI mapping in support of the OS SRG compliance. This batch of CCI mappings were done with the help Cliff Trueman. As usual, these are open for discussion and change as necessary.

Willy Santos (21):
  Remapped CCIs 764 and 804 from unmet_impractical_guidance to
    met_inherently. Based on input from  Shawn Wells and input from
    Jeff Blank it was concluded that the use of unique identifiers
    (UIDs) for all users (org or non-org) meets this requirement.
  Mapped CCI-001159 to requirement unclear.
  Mapped CCI-001125 to requirement_unclear.
  Mapped CCI-001126 to requirement_unclear.
  Mapped CCI-001140 to requirement_unclear.
  Mapped CCI-001143 to requirement_unclear.
  Mapped CCI-001149 to requirement_unclear.
  Mapped CCI-001157 to requirement_unclear.
  Mapped CCI-001158 to requirement_unclear.
  Mapped CCI-001166 to requirement_unclear.
  Mapped CCI-001695 to requirement_unclear.
  Mapped CCI-001169 to requirement_unclear.
  Mapped CCI-001170 to requirement_unclear.
  Mapped CCI-001199 to new_rule_needed.
  Mapped CCI-001123 to enable_ip6tables, enable_iptables, and
    service_auditd_enabled.
  Mapped CCI-001190 to enable_auditd_service.
  Mapped CCI-001124 to enable_ip6tables, enable_iptables,
    httpd_servertokens_prod, and httpd_serversignature_off.
  Mapped CCI-001129 to network_ssl.
  Mapped CCI-001132 to network_ssl.
  Mapped CCI-001142 to network_ssl.
  Mapped CCI-001147 to network_ssl.

 rhel6/src/input/auxiliary/srg_support.xml   |    8 ++++----
 rhel6/src/input/services/http.xml           |    4 ++--
 rhel6/src/input/system/auditing.xml         |    2 +-
 rhel6/src/input/system/network/iptables.xml |    4 ++--
 rhel6/src/input/system/network/ssl.xml      |    2 +-
 5 files changed, 10 insertions(+), 10 deletions(-)

-- 
1.7.7.6



More information about the scap-security-guide mailing list