[PATCH 03/11] Mapped NIST AC-3(3) to several SELinux enablement clauses
Shawn Wells
shawn.d.wells at gmail.com
Thu Apr 25 06:16:32 UTC 2013
-------------- next part --------------
>From 9982dbf55158cf8b1ff1113aae490eb6f22a5504 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Wed, 24 Apr 2013 04:34:13 -0400
Subject: [PATCH 03/11] Mapped NIST AC-3(3) to several SELinux enablement clauses
AC-3(3) calls for enforcement of non-DAC access controls over all users and resources. This is accomplished with SELinux.
---
RHEL6/input/system/selinux.xml | 6 +++---
1 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/system/selinux.xml b/RHEL6/input/system/selinux.xml
index 3678784..195a7e8 100644
--- a/RHEL6/input/system/selinux.xml
+++ b/RHEL6/input/system/selinux.xml
@@ -99,7 +99,7 @@ the chances that it will remain off during system operation.
</rationale>
<ident cce="26956-3" />
<oval id="selinux_bootloader_notdisabled" />
-<ref nist="AC-3,AC-6,AU-9" disa="22,32"/>
+<ref nist="AC-3,AC-3(3),AC-6,AU-9" disa="22,32"/>
<tested by="DS" on="20121024"/>
</Rule>
@@ -122,7 +122,7 @@ privileges.
</rationale>
<ident cce="26969-6" />
<oval id="selinux_mode" value="var_selinux_state_name"/>
-<ref nist="AC-3,AC-4,AC-6,AU-9" disa="22,32,26"/>
+<ref nist="AC-3,AC-3(3),AC-4,AC-6,AU-9" disa="22,32,26"/>
<tested by="DS" on="20121024"/>
</Rule>
@@ -148,7 +148,7 @@ targeted for exploitation, such as network or system services.
</rationale>
<ident cce="26875-5" />
<oval id="selinux_policytype" value="var_selinux_policy_name"/>
-<ref nist="AC-3,AC-4,AC-6,AU-9" disa="22,32"/>
+<ref nist="AC-3,AC-3(3),AC-4,AC-6,AU-9" disa="22,32"/>
<tested by="DS" on="20121024"/>
</Rule>
</Group>
--
1.7.1
More information about the scap-security-guide
mailing list