[PATCH 01/14] Mapped CCI-000056 to gui_screen_locking group and install_vlock_package

Willy Santos wsantos at redhat.com
Fri May 4 13:50:57 UTC 2012


CCI-000056 requires the use of session locks until user reauthenticates, the gui_screen_locking group meets this requirement for graphical environments and install_vlock_package meets the requirements for text console sessions.

Signed-off-by: Willy Santos <wsantos at redhat.com>
---
 rhel6/src/input/system/accounts/physical.xml |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/system/accounts/physical.xml b/rhel6/src/input/system/accounts/physical.xml
index 45ad144..96bbe69 100644
--- a/rhel6/src/input/system/accounts/physical.xml
+++ b/rhel6/src/input/system/accounts/physical.xml
@@ -156,6 +156,7 @@ The
 following sections detail commands to enforce idle activation of the screen saver,
 screen locking, a blank-screen screensaver, and an idle
 activation time.
+<ref disa="56" />
 
 <br /><br />
 Because users should be trained to lock the screen when they
@@ -288,7 +289,7 @@ for users who may need to suspend console logins.
 </rationale>
 <ident cce="3910-7" />
 <oval id="package_vlock_installed" />
-<ref nist="CM-6, CM-7" />
+<ref nist="CM-6, CM-7" disa="56" />
 </Rule>
 </Group>
 </Group>
-- 
1.7.7.6



More information about the scap-security-guide mailing list