[PATCH] Rule and checks for disabling qpidd per ticket 50
Shawn Wells
shawn at redhat.com
Wed Jul 25 20:38:05 UTC 2012
On 7/25/12 4:29 PM, Kevin Spargur wrote:
> On 07/25/2012 03:45 PM, Shawn Wells wrote:
>> On 7/25/12 1:16 PM, Kevin Spargur wrote:
>>> <snip>
>>
>> Ack. Technically we don't have requirements against CCI384, but the
>> mapping makes sense.
>
> Thanks for catching that, can I get an ack for changing it to CCI382?
> CCI382 does map back from the OS SRG. If I start mapping things that
> aren't from the OS SRG it'll just muddy the waters.
>
> "The operating system must configure the information system to
> specifically prohibit or restrict the use of organization-defined
> functions, ports, protocols, and/or services."
Makes sense. Ack.
More information about the scap-security-guide
mailing list