[PATCH 18/21] Mapped CCI-001129 to network_ssl.
Shawn Wells
shawn at redhat.com
Tue Jul 3 23:59:31 UTC 2012
On 7/3/12 6:52 PM, Willy Santos wrote:
> CCI-001129 requires maintaining integrity of information during aggregation, packaging and transformation in preparation for transmission. This can be accomplished via SSL/TLS.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
> rhel6/src/input/system/network/ssl.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/system/network/ssl.xml b/rhel6/src/input/system/network/ssl.xml
> index 4a54343..9f59483 100644
> --- a/rhel6/src/input/system/network/ssl.xml
> +++ b/rhel6/src/input/system/network/ssl.xml
> @@ -34,7 +34,7 @@ can be appropriate. The major steps in this process are:
> <li>Enable client support by distributing the CA’s certificate</li>
> </ol>
> </description>
> -<ref disa="1141,1148,1130,1131,1127,1128,1135" />
> +<ref disa="1141,1148,1130,1131,1127,1128,1135,1129" />
>
> <Rule id="network_ssl_create_ca">
> <title>Create a CA to Sign Certificates</title>
SRG-OS-000159 CCI-001129 The operating system must maintain the
integrity of information during aggregation, packaging, and
transformation in preparation for transmission. Ensuring the
confidentiality of transmitted information requires the operating system
take measures in preparing information for transmission. This can be
accomplished via access control _*or encryption.*_
Given that encryption is an accepted method for this, Ack.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120703/0434663d/attachment.html>
More information about the scap-security-guide
mailing list