[PATCH 08/11] Mapped CCI-001694 to met_inherently
Shawn Wells
shawn at redhat.com
Wed May 16 19:34:04 UTC 2012
This CCI states the OS must enforce DAC policy, which is achieved natively in Red Hat Enterprise Linux
---
rhel6/src/input/auxiliary/srg_support.xml | 5 +++++
1 files changed, 5 insertions(+), 0 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index fb0d452..1a92060 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,6 +29,11 @@ Red Hat Enterprise Linux meets this requirement by design.
<ref disa="1683" />
</Rule>
+<Rule id="enforce_DAC">
+<title>The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user</title>
+<rationale>testing....</rationale>
+<ref disa="1694" />
+</Rule>
</Group>
--
1.7.1
--nFreZHaLTZJo0R7j--
More information about the scap-security-guide
mailing list