[PATCH 1/4] Remapped CCI-000056 from install_vlock_package to met_inherently

Shawn Wells shawn at redhat.com
Tue Jul 24 08:23:21 UTC 2012


56 requires that the screenlock only be unlocked after reauthentication (CAC card, password...). This is the default behavior.
---
 RHEL6/input/auxiliary/srg_support.xml    |    2 +-
 RHEL6/input/system/accounts/physical.xml |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/auxiliary/srg_support.xml b/RHEL6/input/auxiliary/srg_support.xml
index 799f87b..d2ff409 100644
--- a/RHEL6/input/auxiliary/srg_support.xml
+++ b/RHEL6/input/auxiliary/srg_support.xml
@@ -12,7 +12,7 @@ not clearly relate.
 Red Hat Enterprise Linux meets this requirement by design.
 <!-- We could include discussion of Common Criteria Testing if so desired here. -->
 </description>
-<ref disa="223,131,130,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34,35,156,186,99,1083,1089,1082,804,764,1209,1214,1237,1248,1265,1269,1314,1362,1368,1310,1311,1328,1399,1400,1425,1427,1499,1693,1665,1670,1674" />
+<ref disa="56,223,131,130,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34,35,156,186,99,1083,1089,1082,804,764,1209,1214,1237,1248,1265,1269,1314,1362,1368,1310,1311,1328,1399,1400,1425,1427,1499,1693,1665,1670,1674" />
 </Group> <!-- end met_inherently -->
 
 <Group id="unmet_impractical_guidance">
diff --git a/RHEL6/input/system/accounts/physical.xml b/RHEL6/input/system/accounts/physical.xml
index af056c5..62a607c 100644
--- a/RHEL6/input/system/accounts/physical.xml
+++ b/RHEL6/input/system/accounts/physical.xml
@@ -288,7 +288,7 @@ for users who may need to suspend console logins.
 </rationale>
 <ident cce="3910-7" />
 <oval id="package_vlock_installed" />
-<ref nist="CM-6, CM-7" disa="56,58" />
+<ref nist="CM-6, CM-7" disa="58" />
 </Rule>
 </Group>
 
-- 
1.7.1


--2oS5YaxWCcQjTEyO--


More information about the scap-security-guide mailing list