[PATCH 08/11] Mapped CCI-001694 to met_inherently

Shawn Wells shawn at redhat.com
Wed May 16 19:34:04 UTC 2012


This CCI states the OS must enforce DAC policy, which is achieved natively in Red Hat Enterprise Linux
---
 rhel6/src/input/auxiliary/srg_support.xml |    5 +++++
 1 files changed, 5 insertions(+), 0 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index fb0d452..1a92060 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,6 +29,11 @@ Red Hat Enterprise Linux meets this requirement by design.
 <ref disa="1683" />
 </Rule>
 
+<Rule id="enforce_DAC">
+<title>The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user</title>
+<rationale>testing....</rationale>
+<ref disa="1694" />
+</Rule>
 
 </Group>
 
-- 
1.7.1


--nFreZHaLTZJo0R7j--


More information about the scap-security-guide mailing list