[PATCH 05/11] Added AC-8(b) to mappings

Shawn Wells shawn.d.wells at gmail.com
Thu Apr 25 06:16:55 UTC 2013


-------------- next part --------------
>From e7dc736d7926e2861446954bfaa57fce53529d9c Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Wed, 24 Apr 2013 05:24:16 -0400
Subject: [PATCH 05/11] Added AC-8(b) to mappings
 Old mappings called out AC-8, but were not granular
 Also, added AC-8(b) to X11 and GDM rules as users must
 specifically acknowledge the banner before logging in

---
 RHEL6/input/system/accounts/banners.xml |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/RHEL6/input/system/accounts/banners.xml b/RHEL6/input/system/accounts/banners.xml
index 1a441e0..e459770 100644
--- a/RHEL6/input/system/accounts/banners.xml
+++ b/RHEL6/input/system/accounts/banners.xml
@@ -79,7 +79,7 @@ process and facilitates possible legal action against attackers.
 </rationale>
 <ident cce="26974-6" />
 <oval id="banner_etc_issue" value="login_banner_text"/>
-<ref nist="AC-8(a),AC-8(c),AC-8" disa="48,1384,1385,1386,1387,1388" />
+<ref nist="AC-8(a),AC-8(b),AC-8(c)" disa="48,1384,1385,1386,1387,1388" />
 <tested by="DS" on="20121026"/>
 </Rule>
 
@@ -116,7 +116,7 @@ process and facilitates possible legal action against attackers.
 </rationale>
 <ident cce="27195-7" />
 <oval id="banner_gui_enabled" />
-<ref nist="AC-8(a),AC-8(c)" disa="48,50" />
+<ref nist="AC-8(a),AC-8(b),AC-8(c)" disa="48,50" />
 </Rule>
 
 <Rule id="set_gdm_login_banner_text" severity="medium">
@@ -144,7 +144,7 @@ process and facilitates possible legal action against attackers.
 </rationale>
 <ident cce="27017-3" />
 <oval id="banner_gui_text_set" value="login_banner_text" />
-<ref nist="AC-8(a),AC-8(c)" disa="48,1384,1385,1386,1387,1388" />
+<ref nist="AC-8(a),AC-8(b),AC-8(c)" disa="48,1384,1385,1386,1387,1388" />
 </Rule>
 
 </Group>
-- 
1.7.1



More information about the scap-security-guide mailing list