[PATCH 18/25] Mapped CCI-000386 to requirement_unclear.

Shawn Wells shawn at redhat.com
Wed Jun 27 22:25:45 UTC 2012


On 6/27/12 6:18 PM, Willy Santos wrote:
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index 138fe05..c070e02 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
>   <description>
>   It is unclear how to satisfy this requirement.
>   </description>
> -<ref disa="20,31,218,219,224" />
> +<ref disa="20,31,218,219,224,386" />
>   </Group> <!-- end unmet_impractical_product -->
>   
>   <Group id="new_rule_needed">



SRG-OS-000097 	CCI-000386 	The operating system must employ automated 
mechanisms to prevent program execution in accordance with the 
organization defined specifications.


I wouldn't think to hard about this one. I would argue that the OS 
provides the mechanisms for this by default through DAC policies (DAC 
policies being the "organization defined" piece).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120627/2826afe7/attachment-0001.html>


More information about the scap-security-guide mailing list