[PATCH 22/26] Mapped CCI-000099 to requirement_unclear.
Shawn Wells
shawn at redhat.com
Fri Jun 29 23:02:27 UTC 2012
On 6/29/12 5:45 PM, Willy Santos wrote:
> CCI-000099 requires employing automated mechanisms to enable authorized users to make information sharing decisions based on access authorizations of sharing partners and access restrictions on information to be shared. This mapping is open to discussion and change.
SRG-OS-000036 CCI-000099 The operating system must employ automated
mechanisms to enable authorized users to make information sharing
decisions based on access authorizations of sharing partners and access
restrictions on information to be shared. Depending on the information
sharing circumstance, the sharing partner may be defined at the
individual, group, or organization level and information may be defined
by specific content, type, or security categorization. The operating
system must restrict data in some manner (e.g., privileged medical,
contract-sensitive, proprietary, personally identifiable information,
special access programs/compartments) and must provide the capability to
automatically enable authorized users to make information sharing
decisions based upon access authorizations.
met_inherently via DAC file permissions
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://fedorahosted.org/pipermail/scap-security-guide/attachments/20120629/88eb6a85/attachment.html>
More information about the scap-security-guide
mailing list