[PATCH 07/21] Mapped CCI-001149 to requirement_unclear.

Shawn Wells shawn at redhat.com
Tue Jul 3 23:35:58 UTC 2012


On 7/3/12 6:52 PM, Willy Santos wrote:
> CCI-001149 requires protection of the integrity and availability of publicly available information and applications. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index 0046920..c0cac62 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
>   <description>
>   It is unclear how to satisfy this requirement.
>   </description>
> -<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143" />
> +<ref disa="20,31,218,219,224,1097,1159,1125,1126,1140,1143,1149" />
>   </Group> <!-- end requirement_unclear -->
>   
>   <Group id="new_rule_needed">

SRG-OS-000174 	CCI-001149 	The operating system must protect the 
integrity and availability of publicly available information and 
applications. 	The purpose of this control is to _*ensure organizations 
explicitly address the protection needs*_ for public information and 
applications _*with such protection likely being implemented as part of 
other security controls.*_


So lemme get this straight: This this control ensures organizations meet 
protection requirements spelled out in other security controls.

impractical_guidance and we can try and get this removed in the next 
round of DoD consensus meetings.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120703/0539e739/attachment.html>


More information about the scap-security-guide mailing list