[PATCH] Rule and checks for disabling qpidd per ticket 50
Kevin Spargur
kspargur at redhat.com
Wed Jul 25 20:29:14 UTC 2012
On 07/25/2012 03:45 PM, Shawn Wells wrote:
> On 7/25/12 1:16 PM, Kevin Spargur wrote:
>> <snip>
>
> Ack. Technically we don't have requirements against CCI384, but the
> mapping makes sense.
Thanks for catching that, can I get an ack for changing it to CCI382?
CCI382 does map back from the OS SRG. If I start mapping things that
aren't from the OS SRG it'll just muddy the waters.
"The operating system must configure the information system to
specifically prohibit or restrict the use of organization-defined
functions, ports, protocols, and/or services."
-Kevin
More information about the scap-security-guide
mailing list