[PATCH 07/11] Mapped CCI-000086 to network-iptables group

Shawn Wells shawn at redhat.com
Wed May 16 19:28:27 UTC 2012


Requirement states OS must enforce ACLs of mobile devices connecting to the OS. The iptables subsystem makes no distinction whether connection is coming from physical or mobile device.
---
 rhel6/src/input/system/network/iptables.xml |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/system/network/iptables.xml b/rhel6/src/input/system/network/iptables.xml
index a539501..29f9aca 100644
--- a/rhel6/src/input/system/network/iptables.xml
+++ b/rhel6/src/input/system/network/iptables.xml
@@ -18,6 +18,7 @@ the iptables and ip6tables configurations included with the system.
 For more complete information that may allow the construction of a
 sophisticated ruleset tailored to your environment, please consult
 the references at the end of this section.</description>
+<ref disa="86" />
 
 <Group id="iptables_activation">
 <title>Inspect and Activate Default Rules</title>
-- 
1.7.1


--W/nzBZO5zC0uMSeA--


More information about the scap-security-guide mailing list