[PATCH 12/12] Updated srg_aux
Shawn Wells
shawn at redhat.com
Sat May 19 17:45:41 UTC 2012
Updated patchset to reflect feedback from Jeff. Specifically:
- Changed <rationale> to <description>
- Changed <Rule> to <Group>'s
---
rhel6/src/input/auxiliary/srg_support.xml | 43 ++++++++++++++---------------
1 files changed, 21 insertions(+), 22 deletions(-)
diff --git a/rhel6/src/input/auxiliary/srg_support.xml b/rhel6/src/input/auxiliary/srg_support.xml
index 2294804..f4d58ef 100644
--- a/rhel6/src/input/auxiliary/srg_support.xml
+++ b/rhel6/src/input/auxiliary/srg_support.xml
@@ -15,31 +15,32 @@ Red Hat Enterprise Linux meets this requirement by design.
</description>
<ref disa="131" />
-<Rule id="audit_account_termination">
+<Group id="audit_account_termination">
<title>The operating system must notify, as required, appropriate individuals for account termination.</title>
-<rationale>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</rationale>
+<description>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</description>
<ref disa="1686" />
-</Rule>
+</Group>
-<Rule id="audit_account_creation">
+<Group id="audit_account_creation">
<title>The operating system must notify, as required, appropriate individuals when accounts are created.</title>
-<rationale>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</rationale>
+<description>The Red Hat Enterprise Linux Auditing Subsystem provides this functionality natively, placing this information in the audit logs for system administrator review.</description>
<ref disa="1683" />
-</Rule>
+</Group>
-<Rule id="enforce_DAC_per_user">
+<Group id="enforce_DAC_per_user">
<title>The operating system must enforce a Discretionary Access Control (DAC) policy that includes or excludes access to the granularity of a single user</title>
-<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
+<description>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</description>
<ref disa="1694" />
-</Rule>
+</Group>
-<Rule id="enforce_DAC_access_rights">
+<Group id="enforce_DAC_access_rights">
<title>The operating system must enforce a Discretionary Access Control (DAC) policy that limits propagation of access rights.</title>
-<rationale>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</rationale>
+<description>Red Hat Enterprise Linux enables Discretionary Access Control (DAC) policy natively, this functionality does not have to be specifically enabled or configured.</description>
<ref disa="1693" />
-
</Group>
+</Group> <!-- end met_inherently --!>
+
<Group id="unmet_impractical_guidance" hidden="true">
<title>Guidance Does Not Meet this Requirement Due to Impracticality or Scope</title>
<description>
@@ -48,22 +49,20 @@ The requirement is impractical or out of scope.
</description>
<ref disa="354,1094" />
-<Rule id="enforce_remote_connections">
+<Group id="enforce_remote_connections">
<title>The operating system must enforce requirements for remote connections to the information system</title>
-<rationale>The technical specifications to meet this policy are organizationally defined, and therefor generic guidance is not availabile.</rationale>
+<description>The technical specifications to meet this policy are organizationally defined, and therefor generic guidance is not availabile.</description>
<ref disa="66" />
-</Rule>
+</Group>
-<Rule id="central_config_management">
+<Group id="central_config_management">
<title>The operating system must employ automated mechanisms to centrally manage configuration settings</title>
-<rationale>An organizational configuration management policy is out of scope of this security guide.</rationale>
+<description>An organizational configuration management policy is out of scope of this security guide.</description>
<ref disa="370" />
-</Rule>
-
-
-
</Group>
+</Group> <!-- end unmet_impractical_guidance !-->
+
<Group id="unmet_impractical_product" hidden="true">
<title>Product Does Not Meet this Requirement Due to Impracticality or Scope</title>
<description>
@@ -71,5 +70,5 @@ The product does not meet this requirement.
The requirement is impractical or out of scope.
</description>
-</Group>
+</Group> <!-- end unmet_impractical_product !-->
</Group>
--
1.7.1
--cWoXeonUoKmBZSoM--
More information about the scap-security-guide
mailing list