[PATCH 22/26] Mapped CCI-000099 to requirement_unclear.

Shawn Wells shawn at redhat.com
Fri Jun 29 23:02:27 UTC 2012


On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-000099 requires employing automated mechanisms to enable authorized users to make information sharing decisions based on access authorizations of sharing partners and access restrictions on information to be shared. This mapping is open to discussion and change.
SRG-OS-000036 	CCI-000099 	The operating system must employ automated 
mechanisms to enable authorized users to make information sharing 
decisions based on access authorizations of sharing partners and access 
restrictions on information to be shared. 	Depending on the information 
sharing circumstance, the sharing partner may be defined at the 
individual, group, or organization level and information may be defined 
by specific content, type, or security categorization. The operating 
system must restrict data in some manner (e.g., privileged medical, 
contract-sensitive, proprietary, personally identifiable information, 
special access programs/compartments) and must provide the capability to 
automatically enable authorized users to make information sharing 
decisions based upon access authorizations.



met_inherently via DAC file permissions

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120629/88eb6a85/attachment.html>


More information about the scap-security-guide mailing list