[PATCH 08/26] Mapped CCI-000027 to requirement_unclear.
Shawn Wells
shawn at redhat.com
Fri Jun 29 22:43:40 UTC 2012
On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-000027 refers to enforcing dynamic information flow control based on policy upon changing conditions or operational considerations. This mapping is open to discussion and change.
SRG-OS-000011 CCI-000027 The operating system must enforce dynamic
information flow control based on policy that must allow or disallow
information flows based upon changing conditions or operational
considerations. Information flow control regulates where information is
allowed to travel within an information system and between information
systems (as opposed to who is allowed to access the information) and
without explicit regard to subsequent accesses to the information. The
operating system must enforce flow control decisions based upon changing
conditions.
Our security posture allows the dynamic adjustment of information flows
through the realtime configuration of IPTables as conditions and
operational considerations change. I'd map back to our enable_iptables
group.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120629/48b0e68f/attachment.html>
More information about the scap-security-guide
mailing list