[PATCH 01/14] Mapped CCI-000056 to gui_screen_locking group and install_vlock_package
Willy Santos
wsantos at redhat.com
Fri May 4 13:50:57 UTC 2012
CCI-000056 requires the use of session locks until user reauthenticates, the gui_screen_locking group meets this requirement for graphical environments and install_vlock_package meets the requirements for text console sessions.
Signed-off-by: Willy Santos <wsantos at redhat.com>
---
rhel6/src/input/system/accounts/physical.xml | 3 ++-
1 files changed, 2 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/system/accounts/physical.xml b/rhel6/src/input/system/accounts/physical.xml
index 45ad144..96bbe69 100644
--- a/rhel6/src/input/system/accounts/physical.xml
+++ b/rhel6/src/input/system/accounts/physical.xml
@@ -156,6 +156,7 @@ The
following sections detail commands to enforce idle activation of the screen saver,
screen locking, a blank-screen screensaver, and an idle
activation time.
+<ref disa="56" />
<br /><br />
Because users should be trained to lock the screen when they
@@ -288,7 +289,7 @@ for users who may need to suspend console logins.
</rationale>
<ident cce="3910-7" />
<oval id="package_vlock_installed" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="56" />
</Rule>
</Group>
</Group>
--
1.7.7.6
More information about the scap-security-guide
mailing list