[PATCH 03/11] Mapped CCI-000370 to unmet_impractical_guidance

Shawn Wells shawn at redhat.com
Wed May 16 18:34:14 UTC 2012


370 requires the organization to create a centralized configuration management system, which is out of scope for this security guide.
---
 rhel6/src/input/auxiliary/srg_support.xml |   16 +++++++++++++++-
 1 files changed, 15 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 44536ae..5dbdc95 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -33,6 +33,20 @@ to ensure the connection provides adequate integrity and confidentiality of the
 <ref disa="66" />
 </Rule>
 
+<Rule id="central_config_management">
+<title>The operating system must employ automated mechanisms to centrally manage configuration settings</title>
+<description>Configuration settings are the configurable security-related parameters of information technology
+products that are part of the information system. Security-related parameters are those parameters
+impacting the security state of the system including parameters related to meeting other security control
+requirements. Security-related parameters include, for example, registry settings; account, file, and directory 
+settings (i.e., permissions); and settings for services, ports, protocols, and remote connections. Rather 
+than visiting each system when making configuration changes, organizations must employ automated tools that 
+can make changes across all systems. This greatly increases efficiency and manageability of applications in a 
+large scale environment.</description>
+<rationale>An organizational configuration management policy is out of scope of this security guide.</rationale>
+<ref disa="370" />
+</Rule>
+
 
 
 </Group>
@@ -43,7 +57,7 @@ to ensure the connection provides adequate integrity and confidentiality of the
 The product does not meet this requirement.
 The requirement is impractical or out of scope.
 </description>
-<ref disa="" />
+
 </Group>
 
 </Group>
-- 
1.7.1


--zYM0uCDKw75PZbzx--


More information about the scap-security-guide mailing list