[PATCH 37/37] Mapped CCI-001150 to requirement_unclear.

Shawn Wells shawn at redhat.com
Sat Jul 7 01:28:36 UTC 2012


On 7/6/12 2:59 PM, Willy Santos wrote:
> CCI-001150 requires prohibiting remote activation of collaborative computing devices, excluding org-defined exceptions where remote activation is to be allowed. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index 80d690f..447fb0e 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
>   <description>
>   It is unclear how to satisfy this requirement.
>   </description>
> -<ref disa="20,31,218,219,224,1097,1158,1291,1294,1295,1395,1428,1500,553" />
> +<ref disa="20,31,218,219,224,1097,1158,1291,1294,1295,1395,1428,1500,553,1150" />
>   </Group> <!-- end requirement_unclear -->
>   
>   <Group id="new_rule_needed">

SRG-OS-000175 	CCI-001150 	The operating system must prohibit remote 
activation of collaborative computing devices, excluding the 
organization-defined exceptions where remote activation is to be 
allowed. 	Collaborative computing devices include networked white 
boards, cameras, and microphones. Collaborative software examples 
include instant messaging or chat clients.


By their description this is written for client-side clients (chat, 
messaging) or physical elements like cameras. We're making server 
profiles and none of this applies.

impractical_guidance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120706/fb7cc38a/attachment.html>


More information about the scap-security-guide mailing list