[PATCH 11/11] Mapped CCI-001693 to enforce_DAC_access_rights
Shawn Wells
shawn at redhat.com
Wed May 16 19:41:56 UTC 2012
This CCI requires DAC policy which limits propagation of access rights, which is the default behavior of Linux DAC systems
---
rhel6/src/input/auxiliary/srg_support.xml | 7 ++++++-
1 files changed, 6 insertions(+), 1 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 563d370..2294804 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -29,10 +29,15 @@ Red Hat Enterprise Linux meets this requirement by design.
<Rule id="enforce_DAC_per_user">
<title>The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user</title>
-<rationale>testing....</rationale>
+<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
<ref disa="1694" />
</Rule>
+<Rule id="enforce_DAC_access_rights">
+<title>The operating system must enforce a Discretionary Access Control (DAC) policy that limits propagation of access rights.</title>
+<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
+<ref disa="1693" />
+
</Group>
<Group id="unmet_impractical_guidance" hidden="true">
--
1.7.1
--T4sUOijqQbZv57TR--
More information about the scap-security-guide
mailing list