[PATCH 64/64] Mapped MA-1(b) to yum controls
Shawn Wells
shawn.d.wells at gmail.com
Fri Apr 26 02:23:09 UTC 2013
-------------- next part --------------
>From a16aa2ed4f350192e1eb8be9c13a1559174f0ab3 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 21:58:17 -0400
Subject: [PATCH 64/64] Mapped MA-1(b) to yum controls
MA-1(b) calls for "documented procedures to facilitate the implementation of the information system
maintenance policy," which SSG yum rules address. Note: In no way does the yum section sufficiently
address comprehensive system maintenance, rather plays a key element in a broader strategy.
---
RHEL6/input/system/software/updating.xml | 8 ++++----
1 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/RHEL6/input/system/software/updating.xml b/RHEL6/input/system/software/updating.xml
index 1e46dd0..4177d15 100644
--- a/RHEL6/input/system/software/updating.xml
+++ b/RHEL6/input/system/software/updating.xml
@@ -44,7 +44,7 @@ are from Red Hat.
</rationale>
<ident cce="26506-6"/>
<oval id="package_red_hat_gpgkeys_installed" />
-<ref nist="SI-7" disa="351"/>
+<ref nist="SI-7,MA-1(b)" disa="351"/>
<tested by="MM" on="20120928"/>
</Rule>
@@ -76,7 +76,7 @@ protects against malicious tampering.
</rationale>
<ident cce="26709-6" />
<oval id="yum_gpgcheck_global_activation" />
-<ref nist="SI-7" disa="352,663" />
+<ref nist="SI-7,MA-1(b)" disa="352,663" />
<tested by="MM" on="20120928"/>
</Rule>
@@ -101,7 +101,7 @@ protects against malicious tampering.
</rationale>
<ident cce="26647-8" />
<oval id="ensure_gpgcheck_never_disabled" />
-<ref nist="SI-7" disa="352,663"/>
+<ref nist="SI-7,MA-1(b)" disa="352,663"/>
<tested by="MM" on="20120928"/>
</Rule>
@@ -129,7 +129,7 @@ to determine if the system is missing applicable updates.
Installing software updates is a fundamental mitigation against
the exploitation of publicly-known vulnerabilities.
</rationale>
-<ref nist="SI-2" disa="1227,1233"/>
+<ref nist="SI-2,MA-1(b)" disa="1227,1233"/>
<tested by="MM" on="20120928"/>
</Rule>
</Group>
--
1.7.1
More information about the scap-security-guide
mailing list