[PATCH 12/12] Updated srg_aux

Shawn Wells shawn at redhat.com
Sat May 19 17:45:41 UTC 2012


Updated patchset to reflect feedback from Jeff. Specifically:
- Changed <rationale> to <description>
- Changed <Rule> to <Group>'s
---
 rhel6/src/input/auxiliary/srg_support.xml |   43 ++++++++++++++---------------
 1 files changed, 21 insertions(+), 22 deletions(-)

diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 2294804..f4d58ef 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -15,31 +15,32 @@ Red Hat Enterprise Linux meets this requirement by design.
 </description>
 <ref disa="131" />
 
-<Rule id="audit_account_termination">
+<Group id="audit_account_termination">
 <title>The operating system must notify, as required, appropriate individuals for account termination.</title>
-<rationale>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</rationale>
+<description>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</description>
 <ref disa="1686" />
-</Rule>
+</Group>
 
-<Rule id="audit_account_creation">
+<Group id="audit_account_creation">
 <title>The operating system must notify, as required, appropriate individuals when accounts are created.</title>
-<rationale>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</rationale>
+<description>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</description>
 <ref disa="1683" />
-</Rule>
+</Group>
 
-<Rule id="enforce_DAC_per_user">
+<Group id="enforce_DAC_per_user">
 <title>The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user</title>
-<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
+<description>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</description>
 <ref disa="1694" />
-</Rule>
+</Group>
 
-<Rule id="enforce_DAC_access_rights">
+<Group id="enforce_DAC_access_rights">
 <title>The operating system must enforce a Discretionary Access Control (DAC) policy that limits propagation of access rights.</title>
-<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
+<description>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</description>
 <ref disa="1693" />
-
 </Group>
 
+</Group> <!-- end met_inherently --!>
+
 <Group id="unmet_impractical_guidance" hidden="true">
 <title>Guidance Does Not Meet this Requirement Due to Impracticality or Scope</title>
 <description>
@@ -48,22 +49,20 @@ The requirement is impractical or out of scope.
 </description>
 <ref disa="354,1094" />
 
-<Rule id="enforce_remote_connections">
+<Group id="enforce_remote_connections">
 <title>The operating system must enforce requirements for remote connections to the information system</title>
-<rationale>The technical specifications to meet this policy are organizationally defined, and therefor generic guidance is not availabile.</rationale>
+<description>The technical specifications to meet this policy are organizationally defined, and therefor generic guidance is not availabile.</description>
 <ref disa="66" />
-</Rule>
+</Group>
 
-<Rule id="central_config_management">
+<Group id="central_config_management">
 <title>The operating system must employ automated mechanisms to centrally manage configuration settings</title>
-<rationale>An organizational configuration management policy is out of scope of this security guide.</rationale>
+<description>An organizational configuration management policy is out of scope of this security guide.</description>
 <ref disa="370" />
-</Rule>
-
-
-
 </Group>
 
+</Group> <!-- end unmet_impractical_guidance !-->
+
 <Group id="unmet_impractical_product" hidden="true">
 <title>Product Does Not Meet this Requirement Due to Impracticality or Scope</title>
 <description>
@@ -71,5 +70,5 @@ The product does not meet this requirement.
 The requirement is impractical or out of scope.
 </description>
 
-</Group>
+</Group> <!-- end unmet_impractical_product !-->
 </Group>
-- 
1.7.1


--cWoXeonUoKmBZSoM--


More information about the scap-security-guide mailing list