[PATCH 11/11] Mapped CCI-001693 to enforce_DAC_access_rights

Shawn Wells shawn at redhat.com
Wed May 16 19:41:56 UTC 2012


This CCI requires DAC policy which limits propagation of access rights, which is the default behavior of Linux DAC systems
---
 rhel6/src/input/auxiliary/srg_support.xml |    7 ++++++-
 1 files changed, 6 insertions(+), 1 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 563d370..2294804 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,10 +29,15 @@ Red Hat Enterprise Linux meets this requirement by design.
 
 <Rule id="enforce_DAC_per_user">
 <title>The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user</title>
-<rationale>testing....</rationale>
+<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
 <ref disa="1694" />
 </Rule>
 
+<Rule id="enforce_DAC_access_rights">
+<title>The operating system must enforce a Discretionary Access Control (DAC) policy that limits propagation of access rights.</title>
+<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
+<ref disa="1693" />
+
 </Group>
 
 <Group id="unmet_impractical_guidance" hidden="true">
-- 
1.7.1


--T4sUOijqQbZv57TR--


More information about the scap-security-guide mailing list