[PATCH 13/26] Mapped CCI-00034 to met_inherently.

Shawn Wells shawn at redhat.com
Fri Jun 29 22:54:14 UTC 2012


On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-000034 requires providing a privileged administrator the capability to enable/disable org-defined security policy filters. By default in RHEL6, the root account has privileges to manage all security functions on the system.
>
> Signed-off-by: Willy Santos <wsantos at redhat.com>
> ---
>   rhel6/src/input/auxiliary/srg_support.xml |    2 +-
>   1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
> index 6c06926..c7df431 100644
> --- a/rhel6/src/input/auxiliary/srg_support.xml
> +++ b/rhel6/src/input/auxiliary/srg_support.xml
> @@ -12,7 +12,7 @@ not clearly relate.
>   Red Hat Enterprise Linux meets this requirement by design.
>   <!-- We could include discussion of Common Criteria Testing if so desired here. -->
>   </description>
> -<ref disa="223,131,130,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386" />
> +<ref disa="223,131,130,132,133,134,159,1694,162,163,164,345,346,872,1493,1494,1495,226,1096,386,34" />
>   </Group> <!-- end met_inherently -->
>   
>   <Group id="unmet_impractical_guidance">

Ack


More information about the scap-security-guide mailing list