[PATCH 03/11] Mapped CCI-000370 to unmet_impractical_guidance
Shawn Wells
shawn at redhat.com
Wed May 16 18:34:14 UTC 2012
370 requires the organization to create a centralized configuration management system, which is out of scope for this security guide.
---
rhel6/src/input/auxiliary/srg_support.xml | 16 +++++++++++++++-
1 files changed, 15 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 44536ae..5dbdc95 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -33,6 +33,20 @@ to ensure the connection provides adequate integrity and confidentiality of the
<ref disa="66" />
</Rule>
+<Rule id="central_config_management">
+<title>The operating system must employ automated mechanisms to centrally manage configuration settings</title>
+<description>Configuration settings are the configurable security-related parameters of information technology
+products that are part of the information system. Security-related parameters are those parameters
+impacting the security state of the system including parameters related to meeting other security control
+requirements. Security-related parameters include, for example, registry settings; account, file, and directory
+settings (i.e., permissions); and settings for services, ports, protocols, and remote connections. Rather
+than visiting each system when making configuration changes, organizations must employ automated tools that
+can make changes across all systems. This greatly increases efficiency and manageability of applications in a
+large scale environment.</description>
+<rationale>An organizational configuration management policy is out of scope of this security guide.</rationale>
+<ref disa="370" />
+</Rule>
+
</Group>
@@ -43,7 +57,7 @@ to ensure the connection provides adequate integrity and confidentiality of the
The product does not meet this requirement.
The requirement is impractical or out of scope.
</description>
-<ref disa="" />
+
</Group>
</Group>
--
1.7.1
--zYM0uCDKw75PZbzx--
More information about the scap-security-guide
mailing list