[PATCH 07/11] Mapped CCI-000086 to network-iptables group
Shawn Wells
shawn at redhat.com
Wed May 16 19:28:27 UTC 2012
Requirement states OS must enforce ACLs of mobile devices connecting to the OS. The iptables subsystem makes no distinction whether connection is coming from physical or mobile device.
---
rhel6/src/input/system/network/iptables.xml | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/rhel6/src/input/system/network/iptables.xml b/rhel6/src/input/system/network/iptables.xml
index a539501..29f9aca 100644
--- a/rhel6/src/input/system/network/iptables.xml
+++ b/rhel6/src/input/system/network/iptables.xml
@@ -18,6 +18,7 @@ the iptables and ip6tables configurations included with the system.
For more complete information that may allow the construction of a
sophisticated ruleset tailored to your environment, please consult
the references at the end of this section.</description>
+<ref disa="86" />
<Group id="iptables_activation">
<title>Inspect and Activate Default Rules</title>
--
1.7.1
--W/nzBZO5zC0uMSeA--
More information about the scap-security-guide
mailing list