[PATCH 37/37] Mapped CCI-001150 to requirement_unclear.
Shawn Wells
shawn at redhat.com
Sat Jul 7 01:28:36 UTC 2012
On 7/6/12 2:59 PM, Willy Santos wrote:
> CCI-001150 requires prohibiting remote activation of collaborative computing devices, excluding org-defined exceptions where remote activation is to be allowed. This mapping is a request for input/discussion.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
> rhel6/src/input/auxiliary/srg_support.xml | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index 80d690f..447fb0e 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -38,7 +38,7 @@ The requirement is impractical or out of scope.
> <description>
> It is unclear how to satisfy this requirement.
> </description>
> -<ref disa="20,31,218,219,224,1097,1158,1291,1294,1295,1395,1428,1500,553" />
> +<ref disa="20,31,218,219,224,1097,1158,1291,1294,1295,1395,1428,1500,553,1150" />
> </Group> <!-- end requirement_unclear -->
>
> <Group id="new_rule_needed">
SRG-OS-000175 CCI-001150 The operating system must prohibit remote
activation of collaborative computing devices, excluding the
organization-defined exceptions where remote activation is to be
allowed. Collaborative computing devices include networked white
boards, cameras, and microphones. Collaborative software examples
include instant messaging or chat clients.
By their description this is written for client-side clients (chat,
messaging) or physical elements like cameras. We're making server
profiles and none of this applies.
impractical_guidance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120706/fb7cc38a/attachment.html>
More information about the scap-security-guide
mailing list