[PATCH 16/16] Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule Mapped CCI-001414 to enable_ip6tables, enable_iptables, set_iptables_default_rule per feedback from DISA FSO.

Shawn Wells shawn at redhat.com
Tue Jul 24 03:18:58 UTC 2012


---
 RHEL6/input/system/network/iptables.xml |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/network/iptables.xml b/RHEL6/input/system/network/iptables.xml
index 23f5dee..dc3a584 100644
--- a/RHEL6/input/system/network/iptables.xml
+++ b/RHEL6/input/system/network/iptables.xml
@@ -76,7 +76,7 @@ capability for IPv6 and ICMPv6.
 </rationale>
 <ident cce="4167-3" />
 <oval id="service_ip6tables_enabled" />
-<ref nist="CM-6, CM-7" disa="66,1115,1118,1092,1117,1098,1100,1097,1123,1124"/>
+<ref nist="CM-6, CM-7" disa="66,1115,1118,1092,1117,1098,1100,1097,1123,1124,1414"/>
 </Rule>
 
 <Rule id="enable_iptables">
@@ -90,7 +90,7 @@ capability for IPv4 and ICMP.
 </rationale>
 <ident cce="4189-7" />
 <oval id="service_iptables_enabled" />
-<ref nist="CM-6, CM-7" disa="66,1115,1118,1092,27,1117,1098,1100,1097,1123,1124" />
+<ref nist="CM-6, CM-7" disa="66,1115,1118,1092,27,1117,1098,1100,1097,1123,1124,1414" />
 </Rule>
 </Group><!--<Group id="iptables_activation">-->
 
@@ -140,7 +140,7 @@ any packets which are not explicitly permitted should not be
 accepted.</rationale>
 <ident cce="14264-6" />
 <oval id="iptables_default_policy_drop" />
-<ref nist="AC-4, CM-6" disa="66,1109,1154" />
+<ref nist="AC-4, CM-6" disa="66,1109,1154,1414" />
 </Rule>
 
 <Rule id="set_iptables_default_rule_forward">
-- 
1.7.1


--GvXjxJ+pjyke8COw--


More information about the scap-security-guide mailing list