[PATCH 19/21] Mapped CCI-001132 to network_ssl.
Shawn Wells
shawn at redhat.com
Wed Jul 4 00:00:27 UTC 2012
On 7/3/12 6:52 PM, Willy Santos wrote:
> CCI-001132 requires maintaining integrity of information during aggregation, packaging and transformation in preparation for transmission. This can be accomplished via SSL/TLS.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
> rhel6/src/input/system/network/ssl.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/system/network/ssl.xml b/rhel6/src/input/system/network/ssl.xml
> index 9f59483..50f5b0b 100644
> --- a/rhel6/src/input/system/network/ssl.xml
> +++ b/rhel6/src/input/system/network/ssl.xml
> @@ -34,7 +34,7 @@ can be appropriate. The major steps in this process are:
> <li>Enable client support by distributing the CA’s certificate</li>
> </ol>
> </description>
> -<ref disa="1141,1148,1130,1131,1127,1128,1135,1129" />
> +<ref disa="1141,1148,1130,1131,1127,1128,1135,1129,1132" />
>
> <Rule id="network_ssl_create_ca">
> <title>Create a CA to Sign Certificates</title>
SRG-OS-000162 CCI-001132 The operating system must maintain the
confidentiality of information during aggregation, packaging, and
transformation in preparation for transmission. Confidentiality of the
data must be maintained to ensure unauthorized users or processes do not
have access to it. This can be accomplished via access control
mechanisms _*or encryption.*_
Given that encryption is an accepted method for this, Ack.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120703/86dd6d4b/attachment.html>
More information about the scap-security-guide
mailing list