[PATCH 18/21] Mapped CCI-001129 to network_ssl.

Shawn Wells shawn at redhat.com
Tue Jul 3 23:59:31 UTC 2012


On 7/3/12 6:52 PM, Willy Santos wrote:
> CCI-001129 requires maintaining integrity of information during aggregation, packaging and transformation in preparation for transmission. This can be accomplished via SSL/TLS.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/system/network/ssl.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/system/network/ssl.xml b/rhel6/src/input/system/network/ssl.xml
> index 4a54343..9f59483 100644
> --- a/rhel6/src/input/system/network/ssl.xml
> +++ b/rhel6/src/input/system/network/ssl.xml
> @@ -34,7 +34,7 @@ can be appropriate. The major steps in this process are:
>   <li>Enable client support by distributing the CA’s certificate</li>
>   </ol>
>   </description>
> -<ref disa="1141,1148,1130,1131,1127,1128,1135" />
> +<ref disa="1141,1148,1130,1131,1127,1128,1135,1129" />
>   
>   <Rule id="network_ssl_create_ca">
>   <title>Create a CA to Sign Certificates</title>

SRG-OS-000159 	CCI-001129 	The operating system must maintain the 
integrity of information during aggregation, packaging, and 
transformation in preparation for transmission. 	Ensuring the 
confidentiality of transmitted information requires the operating system 
take measures in preparing information for transmission. This can be 
accomplished via access control _*or encryption.*_


Given that encryption is an accepted method for this, Ack.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120703/0434663d/attachment.html>


More information about the scap-security-guide mailing list