[PATCH 2/5] Corrected mapping of CCI 206.

Willy Santos wsantos at redhat.com
Wed Jul 25 21:36:47 UTC 2012


Removed mapping to accounts group and remapped to met_inherently, based on feedback from DISA FSO.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 RHEL6/input/auxiliary/srg_support.xml    |    2 +-
 RHEL6/input/system/accounts/accounts.xml |    1 -
 2 files changed, 1 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/auxiliary/srg_support.xml b/RHEL6/input/auxiliary/srg_support.xml
index 11e22f5..b4ecef4 100644
--- a/RHEL6/input/auxiliary/srg_support.xml
+++ b/RHEL6/input/auxiliary/srg_support.xml
@@ -12,7 +12,7 @@ not clearly relate.
 Red Hat Enterprise Linux meets this requirement by design.
 <!-- We could include discussion of Common Criteria Testing if so desired here. -->
 </description>
-<ref disa="56,223,131,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34,35,156,186,99,1083,1089,1082,804,764,1209,1214,1237,1248,1265,1269,1314,1362,1368,1310,1311,1328,1399,1400,1425,1427,1499,1693,1665,1670,1674" />
+<ref disa="56,223,131,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34,35,156,186,99,1083,1089,1082,804,764,1209,1214,1237,1248,1265,1269,1314,1362,1368,1310,1311,1328,1399,1400,1425,1427,1499,1693,1665,1670,1674,206" />
 </Group> <!-- end met_inherently -->
 
 <Group id="unmet_impractical_guidance">
diff --git a/RHEL6/input/system/accounts/accounts.xml b/RHEL6/input/system/accounts/accounts.xml
index 593367a..86278bb 100644
--- a/RHEL6/input/system/accounts/accounts.xml
+++ b/RHEL6/input/system/accounts/accounts.xml
@@ -8,6 +8,5 @@ access to accounts, particularly to privileged accounts, is a
 necessary part of securing a system. This section introduces
 mechanisms for restricting access to accounts under
 RHEL6.</description>
-<ref disa="206" />
 </Group>
 
-- 
1.7.7.6



More information about the scap-security-guide mailing list