[PATCH 05/11] Added AC-8(b) to mappings
Shawn Wells
shawn.d.wells at gmail.com
Thu Apr 25 06:16:55 UTC 2013
-------------- next part --------------
>From e7dc736d7926e2861446954bfaa57fce53529d9c Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Wed, 24 Apr 2013 05:24:16 -0400
Subject: [PATCH 05/11] Added AC-8(b) to mappings
Old mappings called out AC-8, but were not granular
Also, added AC-8(b) to X11 and GDM rules as users must
specifically acknowledge the banner before logging in
---
RHEL6/input/system/accounts/banners.xml | 6 +++---
1 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/RHEL6/input/system/accounts/banners.xml b/RHEL6/input/system/accounts/banners.xml
index 1a441e0..e459770 100644
--- a/RHEL6/input/system/accounts/banners.xml
+++ b/RHEL6/input/system/accounts/banners.xml
@@ -79,7 +79,7 @@ process and facilitates possible legal action against attackers.
</rationale>
<ident cce="26974-6" />
<oval id="banner_etc_issue" value="login_banner_text"/>
-<ref nist="AC-8(a),AC-8(c),AC-8" disa="48,1384,1385,1386,1387,1388" />
+<ref nist="AC-8(a),AC-8(b),AC-8(c)" disa="48,1384,1385,1386,1387,1388" />
<tested by="DS" on="20121026"/>
</Rule>
@@ -116,7 +116,7 @@ process and facilitates possible legal action against attackers.
</rationale>
<ident cce="27195-7" />
<oval id="banner_gui_enabled" />
-<ref nist="AC-8(a),AC-8(c)" disa="48,50" />
+<ref nist="AC-8(a),AC-8(b),AC-8(c)" disa="48,50" />
</Rule>
<Rule id="set_gdm_login_banner_text" severity="medium">
@@ -144,7 +144,7 @@ process and facilitates possible legal action against attackers.
</rationale>
<ident cce="27017-3" />
<oval id="banner_gui_text_set" value="login_banner_text" />
-<ref nist="AC-8(a),AC-8(c)" disa="48,1384,1385,1386,1387,1388" />
+<ref nist="AC-8(a),AC-8(b),AC-8(c)" disa="48,1384,1385,1386,1387,1388" />
</Rule>
</Group>
--
1.7.1
More information about the scap-security-guide
mailing list