[PATCH 03/11] Mapped NIST AC-3(3) to several SELinux enablement clauses

Shawn Wells shawn.d.wells at gmail.com
Thu Apr 25 06:16:32 UTC 2013


-------------- next part --------------
>From 9982dbf55158cf8b1ff1113aae490eb6f22a5504 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Wed, 24 Apr 2013 04:34:13 -0400
Subject: [PATCH 03/11] Mapped NIST AC-3(3) to several SELinux enablement clauses
 AC-3(3) calls for enforcement of non-DAC access controls over all users and resources. This is accomplished with SELinux.

---
 RHEL6/input/system/selinux.xml |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/selinux.xml b/RHEL6/input/system/selinux.xml
index 3678784..195a7e8 100644
--- a/RHEL6/input/system/selinux.xml
+++ b/RHEL6/input/system/selinux.xml
@@ -99,7 +99,7 @@ the chances that it will remain off during system operation.
 </rationale>
 <ident cce="26956-3" />
 <oval id="selinux_bootloader_notdisabled" />
-<ref nist="AC-3,AC-6,AU-9" disa="22,32"/>
+<ref nist="AC-3,AC-3(3),AC-6,AU-9" disa="22,32"/>
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -122,7 +122,7 @@ privileges.
 </rationale>
 <ident cce="26969-6" />
 <oval id="selinux_mode" value="var_selinux_state_name"/>
-<ref nist="AC-3,AC-4,AC-6,AU-9" disa="22,32,26"/>
+<ref nist="AC-3,AC-3(3),AC-4,AC-6,AU-9" disa="22,32,26"/>
 <tested by="DS" on="20121024"/>
 </Rule>
 
@@ -148,7 +148,7 @@ targeted for exploitation, such as network or system services.
 </rationale>
 <ident cce="26875-5" />
 <oval id="selinux_policytype" value="var_selinux_policy_name"/>
-<ref nist="AC-3,AC-4,AC-6,AU-9" disa="22,32"/>
+<ref nist="AC-3,AC-3(3),AC-4,AC-6,AU-9" disa="22,32"/>
 <tested by="DS" on="20121024"/>
 </Rule>
 </Group>
-- 
1.7.1



More information about the scap-security-guide mailing list