[PATCH 08/26] Mapped CCI-000027 to requirement_unclear.

Shawn Wells shawn at redhat.com
Fri Jun 29 22:43:40 UTC 2012


On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-000027 refers to enforcing dynamic information flow control based on policy upon changing conditions or operational considerations. This mapping is open to discussion and change.


SRG-OS-000011 	CCI-000027 	The operating system must enforce dynamic 
information flow control based on policy that must allow or disallow 
information flows based upon changing conditions or operational 
considerations. 	Information flow control regulates where information is 
allowed to travel within an information system and between information 
systems (as opposed to who is allowed to access the information) and 
without explicit regard to subsequent accesses to the information. The 
operating system must enforce flow control decisions based upon changing 
conditions.


Our security posture allows the dynamic adjustment of information flows 
through the realtime configuration of IPTables as conditions and 
operational considerations change. I'd map back to our enable_iptables 
group.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120629/48b0e68f/attachment.html>


More information about the scap-security-guide mailing list