[PATCH 18/25] Mapped CCI-000386 to requirement_unclear.

Willy Santos wsantos at redhat.com
Thu Jun 28 18:36:51 UTC 2012


On 06/27/2012 06:25 PM, Shawn Wells wrote:
> On 6/27/12 6:18 PM, Willy Santos wrote:
>> Signed-off-by: Willy Santos<wsantos at redhat.com>
>> ---
>>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>>   1 files changed, 1 insertions(+), 1 deletions(-)
>>
>> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
>> index 138fe05..c070e02 100644
>> --- a/rhel6/src/input/auxiliary/srg_support.xml
>> +++ b/rhel6/src/input/auxiliary/srg_support.xml
>> @@ -29,7 +29,7 @@ The requirement is impractical or out of scope.
>>   <description>
>>   It is unclear how to satisfy this requirement.
>>   </description>
>> -<ref disa="20,31,218,219,224" />
>> +<ref disa="20,31,218,219,224,386" />
>>   </Group> <!-- end unmet_impractical_product -->
>>   
>>   <Group id="new_rule_needed">
>
>
>
> SRG-OS-000097 	CCI-000386 	The operating system must employ automated 
> mechanisms to prevent program execution in accordance with the 
> organization defined specifications.
>
>
> I wouldn't think to hard about this one. I would argue that the OS 
> provides the mechanisms for this by default through DAC policies (DAC 
> policies being the "organization defined" piece).
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/scap-security-guide

Agreed. I'll make the change.
-Willy

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120628/d571d3a3/attachment.html>


More information about the scap-security-guide mailing list