[PATCH] Rule and checks for disabling qpidd per ticket 50

Shawn Wells shawn at redhat.com
Wed Jul 25 20:38:05 UTC 2012


On 7/25/12 4:29 PM, Kevin Spargur wrote:
> On 07/25/2012 03:45 PM, Shawn Wells wrote:
>> On 7/25/12 1:16 PM, Kevin Spargur wrote:
>>> <snip>
>>
>> Ack. Technically we don't have requirements against CCI384, but the 
>> mapping makes sense.
>
> Thanks for catching that, can I get an ack for changing it to CCI382?  
> CCI382 does map back from the OS SRG.  If I start mapping things that 
> aren't from the OS SRG it'll just muddy the waters.
>
> "The operating system must configure the information system to 
> specifically prohibit or restrict the use of organization-defined 
> functions, ports, protocols, and/or services." 

Makes sense. Ack.


More information about the scap-security-guide mailing list