[PATCH 00/26] More CCI Mappings

Willy Santos wsantos at redhat.com
Fri Jun 29 21:45:03 UTC 2012


More CCI mappings in support of the OS SRG compliance efforts. Note that any mapping to requirement_unclear is meant for discussion by the group and all suggestions are welcome.



Willy Santos (26):
  Changed mapping of CCI-000386 from requirement_unclear to
    met_inherently as suggested by Shawn Wells.
  Removed mapping of CCI-001092 from requirement_unclear, based on
    discussion/input from Shawn Wells.
  Mapped CCI-001092 to iptables_icmp_disabled and enable_iptables
    enable_ip6tables.
  Mapped CCI-001092 to password_retry.
  Mapped CCI-000024 to requirement_unclear.
  Mapped CCI-000025 to requirement_unclear.
  Mapped CCI-000026 to requirement_unclear.
  Mapped CCI-000027 to requirement_unclear.
  Mapped CCI-000028 to requirement_unclear.
  Mapped CCI-000029 to requirement_unclear.
  Mapped CCI-000030 to requirement_unclear.
  Mapped CCI-000032 to requirement_unclear.
  Mapped CCI-00034 to met_inherently.
  Mapped CCI-00035 to met_inherently.
  Mapped CCI-001250 to gconf_gnome_disable_automount.
  Mapped CCI-000085 to gconf_gnome_disable_automount.
  Mapped CCI-000085 to service_autofs_disabled.
  Mapped CCI-000085 to bios_disable_usb_boot.
  Mapped CCI-000085 to bootloader_nousb_argument.
  Mapped CCI-000085 to kernel_module_usb-storage_removed.
  Mapped CCI-000085 to gconf_gnome_disable_automount.
  Mapped CCI-000099 to requirement_unclear.
  Mapped CCI-000157 to met_inherently.
  Mapped CCI-000185 to network_ssl_enable_client_support.
  Made changes requested by Jeff Blank to accommodate changes made on
    his commit.
  Mapped CCI-000186 to met_inherently.

 rhel6/src/input/auxiliary/srg_support.xml       |   10 +++++-----
 rhel6/src/input/system/accounts/pam.xml         |    2 +-
 rhel6/src/input/system/network/iptables.xml     |    6 +++---
 rhel6/src/input/system/network/ssl.xml          |    2 +-
 rhel6/src/input/system/permissions/mounting.xml |   12 ++++++------
 5 files changed, 16 insertions(+), 16 deletions(-)

-- 
1.7.7.6



More information about the scap-security-guide mailing list