[PATCH 05/16] Mapped CCI-000085 to various bluetooth & wireless controls
Shawn Wells
shawn at redhat.com
Wed Jul 18 13:44:27 UTC 2012
Mapped CCI-000085 to:
- wireless_disable_in_bios
- kernel_module_bluetooth_disabled
- service_bluetooth_disabled
- wireless_disable_drivers
- deactivate_wireless_interfaces
---
RHEL6/input/system/network/wireless.xml | 10 +++++-----
1 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/RHEL6/input/system/network/wireless.xml b/RHEL6/input/system/network/wireless.xml
index 39040eb..15a5f99 100644
--- a/RHEL6/input/system/network/wireless.xml
+++ b/RHEL6/input/system/network/wireless.xml
@@ -35,7 +35,7 @@ to reboot the system first.
</rationale>
<ident cce="3628-5" />
<!--TODO:OCIL <oval id="wireless_disable_in_bios" />-->
-<ref nist="CM-7" />
+<ref nist="CM-7" disa="85" />
</Rule>
<Rule id="deactivate_wireless_interfaces">
@@ -65,7 +65,7 @@ protocols which were not designed with security in mind.
</rationale>
<ident cce="4276-2" />
<oval id="wireless_disable_interfaces" />
-<ref nist="CM-7" />
+<ref nist="CM-7" disa="85" />
</Rule>
<Rule id="wireless_disable_drivers">
@@ -82,7 +82,7 @@ the need to install such a driver first.
<warning category="general">This command must also be repeated every time the kernel is upgraded.</warning>
<ident cce="4170-7" />
<oval id="wireless_disable_drivers" />
-<ref nist="CM-7" />
+<ref nist="CM-7" disa=85" />
</Rule>
<Rule id="service_bluetooth_disabled">
@@ -96,7 +96,7 @@ Nevertheless, variation in this risk decision may be expected due to the
utility of Bluetooth connectivity and its limited range.</rationale>
<ident cce="4355-4" />
<oval id="service_bluetooth_disabled" />
-<ref nist="AC-18, CM-6, CM-7" />
+<ref nist="AC-18, CM-6, CM-7" disa="85" />
</Rule>
<Rule id="kernel_module_bluetooth_disabled">
@@ -113,7 +113,7 @@ from loading the kernel module provides an additional safeguard against its
activation.</rationale>
<ident cce="14948-4" />
<oval id="kernel_module_bluetooth_disabled" />
-<ref nist="AC-18, CM-6, CM-7" />
+<ref nist="AC-18, CM-6, CM-7" disa="85" />
</Rule>
--
1.7.1
--YiEDa0DAkWCtVeE4--
More information about the scap-security-guide
mailing list