[PATCH 25/33] Mapped CCI-001352 to unmet_impractical_product.

Willy Santos wsantos at redhat.com
Thu Jul 5 20:52:38 UTC 2012


CCI-001352 requires protection of audit records from users with privileged access. The audit system runs and writes to files as the root user, thus users with legitimate access to the root account will have access to audit information.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/auxiliary/srg_support.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 575753d..6241599 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -30,7 +30,7 @@ The requirement is impractical or out of scope.
 The product does not meet this requirement.
 The requirement is impractical or out of scope.
 </description>
-<ref disa="28,29,30,32,24,1695,1169,1170" />
+<ref disa="28,29,30,32,24,1695,1169,1170,1352" />
 </Group> <!-- end unmet_impractical_product -->
 
 <Group id="requirement_unclear">
-- 
1.7.7.6



More information about the scap-security-guide mailing list