[PATCH 35/37] Mapped CCI-000553 to requirement_unclear.

Shawn Wells shawn at redhat.com
Sat Jul 7 01:27:04 UTC 2012


On 7/6/12 2:59 PM, Willy Santos wrote:
> CCI-000553 requires implementing transaction recovery for transaction-based systems. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index 70a6c15..80d690f 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
>   <description>
>   It is unclear how to satisfy this requirement.
>   </description>
> -<ref disa="20,31,218,219,224,1097,1158,1291,1294,1295,1395,1428,1500" />
> +<ref disa="20,31,218,219,224,1097,1158,1291,1294,1295,1395,1428,1500,553" />
>   </Group> <!-- end requirement_unclear -->
>   
>   <Group id="new_rule_needed">


SRG-OS-000102 	CCI-000553 	The operating system must implement 
transaction recovery for transaction-based systems. 	Recovery and 
reconstitution constitutes executing an operating system contingency 
plan comprised of activities to restore essential missions and business 
functions. Transaction rollback and transaction journaling are examples 
of mechanisms supporting transaction recovery. While this is typically a 
database function, operating systems could be transactional in nature 
with respect to file processing.



The OS may provide enabling technologies like journaling, but the OS 
itself isn't responsible for the transaction. That's the middlewares job.

  impractical_product.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120706/c675d92d/attachment.html>


More information about the scap-security-guide mailing list