[PATCH 01/11] Mapped CCI-000066 to unmet_impractical_guidance

Shawn Wells shawn at redhat.com
Wed May 16 16:09:20 UTC 2012


66 requires the OS to meet organizational defined policies for remote connections to the information system. As these requirements will be organizationally defined we're unable to create prose against them. At some point in the future we may create guidance for such remote connections, however until then I'm mapping this to unmet.
---
 rhel6/src/input/auxiliary/srg_support.xml |   14 ++++++++++++++
 1 files changed, 14 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index de24ea5..ff0ac6e 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -23,6 +23,20 @@ The guidance does not meet this requirement.
 The requirement is impractical or out of scope.
 </description>
 <ref disa="354,1094" />
+
+<Rule id="enforce_remote_connections">
+<title>The operating system must enforce requirements for remote connections to the information system</title>
+<description>The organization will define the requirements for connection of remote connections.  In order
+to ensure the connection provides adequate integrity and confidentiality of the connection, the operating system must enforce these requirements.
+</description>
+<rationale>The technical specifications to meet this policy are organizationally defined, and therefor generic guidance is not availabile.</rationale>
+<ident cce="TBD" />
+<oval id="TBD" />
+<ref disa="66" />
+</Rule>
+
+
+
 </Group>
 
 <Group id="unmet_impractical_product" hidden="true">
-- 
1.7.1


--HlL+5n6rz5pIUxbD--


More information about the scap-security-guide mailing list