[PATCH] Rule and checks for disabling qpidd per ticket 50

Kevin Spargur kspargur at redhat.com
Wed Jul 25 20:29:14 UTC 2012


On 07/25/2012 03:45 PM, Shawn Wells wrote:
> On 7/25/12 1:16 PM, Kevin Spargur wrote:
>> <snip>
>
> Ack. Technically we don't have requirements against CCI384, but the 
> mapping makes sense.

Thanks for catching that, can I get an ack for changing it to CCI382?  
CCI382 does map back from the OS SRG.  If I start mapping things that 
aren't from the OS SRG it'll just muddy the waters.

"The operating system must configure the information system to 
specifically prohibit or restrict the use of organization-defined 
functions, ports, protocols, and/or services."

-Kevin


More information about the scap-security-guide mailing list