[PATCH 16/33] Mapped CCI-001310 to requirement_unclear.

Shawn Wells shawn at redhat.com
Thu Jul 5 21:15:11 UTC 2012


On 7/5/12 4:52 PM, Willy Santos wrote:
> CCI-001310 requires checkin the validity of information input. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index e29950c..2dff8d7 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
>   <description>
>   It is unclear how to satisfy this requirement.
>   </description>
> -<ref disa="20,31,218,219,224,1097,1158,1239,1291,1294,1295" />
> +<ref disa="20,31,218,219,224,1097,1158,1239,1291,1294,1295,1310" />
>   </Group> <!-- end requirement_unclear -->
>   
>   <Group id="new_rule_needed">



I wouldn't think much about this, since we're really only talking about 
validation of what people type on the console/tty. I'd say met_inherently

[shawn at rhel6 scap-security-guide]$ touch /tmp/test
[shawn at rhel6 scap-security-guide]$ cat /tmp/test
[shawn at rhel6 scap-security-guide]$ cataioas /tmp/test
-bash: cataioas: command not found
[shawn at rhel6 scap-security-guide]$ cat --asidojasdoij /tmp/test
cat: unrecognized option '--asidojasdoij'
Try `cat --help' for more information.


More information about the scap-security-guide mailing list