[PATCH 06/21] Mapped CCI-001143 to requirement_unclear.

Willy Santos wsantos at redhat.com
Tue Jul 3 22:52:26 UTC 2012


CCI-001143 requires the OS to produce, control, and distribute asymmetric cryptographic keys using approved PKI Class 3 or Class 4 certificates and hardware security tokens that protect the user's private key. This mapping is a request for input/discussion.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/auxiliary/srg_support.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 2c8888a..0046920 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
 <description>
 It is unclear how to satisfy this requirement.
 </description>
-<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140" />
+<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143" />
 </Group> <!-- end requirement_unclear -->
 
 <Group id="new_rule_needed">
-- 
1.7.7.6



More information about the scap-security-guide mailing list