[PATCH 00/37] More CCI mappings

Willy Santos wsantos at redhat.com
Fri Jul 6 18:58:40 UTC 2012


More CCI mapping in support of the OS SRG compliance. This batch of CCI mappings were done with the help Cliff Trueman. As usual, these are open for discussion and change as necessary.

Willy Santos (37):
  Fixed missing mapping of CCI-001311.
  Remapped CCI-001328 to met_inherently, based on input from Shawn
    Wells.
  Remapped CCI-001340 to unmet_impractical_guidance, based on input
    from Shawn Wells.
  Remapped CCI-001252 to unmet_impractical_guidance, based on input
    from Shawn Wells.
  Remapped CCI-001356 to auditd_configure_rules, based on input from
    Shawn Wells.
  Mapped CCI-001200 to new_rule_needed.
  Mapped CCI-001391 to accounts-pam.
  Mapped CCI-001392 to accounts-pam.
  Mapped CCI-001395 to requirement_unclear.
  Mapped CCI-001399 to met-inherently.
  Mapped CCI-001400 to met-inherently.
  Mapped CCI-001401 to unmet_impractical_guidance.
  Mapped CCI-001414 to unmet_impractical_guidance.
  Mapped CCI-001424 to enabling_selinux.
  Mapped CCI-001425 to met-inherently.
  Mapped CCI-001426 to enabling_selinux.
  Mapped CCI-001427 to met-inherently.
  Mapped CCI-001428 to requirement_unclear.
  Mapped CCI-001499 to met-inherently.
  Mapped CCI-001500 to requirement_unclear.
  Mapped CCI-001555 to unmet_impractical_guidance.
  Mapped CCI-001555 to unmet_impractical_guidance.
  Mapped CCI-001693 to met-inherently.
  Mapped CCI-001662 to unmet_impractical_product.
  Mapped CCI-001665 to met_inherently.
  Mapped CCI-001668 to unmet_impractical_product.
  Mapped CCI-001670 to met_inherently.
  Mapped CCI-001674 to met_inherently.
  Mapped CCI-001683 to audit_account_changes.
  Mapped CCI-001685 to audit_account_changes.
  Mapped CCI-001686 to audit_account_changes.
  Mapped CCI-001496 to rpm_verify_hashes and
    aide_periodic_cron_checking.
  Mapped CCI-000187 to network_ssl.
  Mapped CCI-000374 to auditd_configure_rules.
  Mapped CCI-000553 to requirement_unclear.
  Mapped CCI-000802 to enabling_selinux.
  Mapped CCI-001150 to requirement_unclear.

 rhel6/src/input/auxiliary/srg_support.xml     |   10 +++++-----
 rhel6/src/input/system/accounts/pam.xml       |    1 +
 rhel6/src/input/system/auditing.xml           |    4 ++--
 rhel6/src/input/system/network/ssl.xml        |    2 +-
 rhel6/src/input/system/selinux.xml            |    2 +-
 rhel6/src/input/system/software/integrity.xml |    4 ++--
 6 files changed, 12 insertions(+), 11 deletions(-)

-- 
1.7.7.6



More information about the scap-security-guide mailing list