[PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently
Shawn Wells
shawn at redhat.com
Tue Jul 24 08:23:21 UTC 2012
56 requires that the screenlock only be unlocked after reauthentication (CAC card, password...). This is the default behavior.
---
RHEL6/input/auxiliary/srg_support.xml | 2 +-
RHEL6/input/system/accounts/physical.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/RHEL6/input/auxiliary/srg_support.xml b/RHEL6/input/auxiliary/srg_support.xml
index 799f87b..d2ff409 100644
--- a/RHEL6/input/auxiliary/srg_support.xml
+++ b/RHEL6/input/auxiliary/srg_support.xml
@@ -12,7 +12,7 @@ not clearly relate.
Red Hat Enterprise Linux meets this requirement by design.
<!-- We could include discussion of Common Criteria Testing if so desired here. -->
</description>
-<ref disa="223,131,130,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34,35,156,186,99,1083,1089,1082,804,764,1209,1214,1237,1248,1265,1269,1314,1362,1368,1310,1311,1328,1399,1400,1425,1427,1499,1693,1665,1670,1674" />
+<ref disa="56,223,131,130,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34,35,156,186,99,1083,1089,1082,804,764,1209,1214,1237,1248,1265,1269,1314,1362,1368,1310,1311,1328,1399,1400,1425,1427,1499,1693,1665,1670,1674" />
</Group> <!-- end met_inherently -->
<Group id="unmet_impractical_guidance">
diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index af056c5..62a607c 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -288,7 +288,7 @@ for users who may need to suspend console logins.
</rationale>
<ident cce="3910-7" />
<oval id="package_vlock_installed" />
-<ref nist="CM-6, CM-7" disa="56,58" />
+<ref nist="CM-6, CM-7" disa="58" />
</Rule>
</Group>
--
1.7.1
--2oS5YaxWCcQjTEyO--
More information about the scap-security-guide
mailing list