[PATCH 64/64] Mapped MA-1(b) to yum controls

Shawn Wells shawn.d.wells at gmail.com
Fri Apr 26 02:23:09 UTC 2013


-------------- next part --------------
>From a16aa2ed4f350192e1eb8be9c13a1559174f0ab3 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 25 Apr 2013 21:58:17 -0400
Subject: [PATCH 64/64] Mapped MA-1(b) to yum controls
 MA-1(b) calls for "documented procedures to facilitate the implementation of the information system
 maintenance policy," which SSG yum rules address. Note: In no way does the yum section sufficiently
 address comprehensive system maintenance, rather plays a key element in a broader strategy.

---
 RHEL6/input/system/software/updating.xml |    8 ++++----
 1 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/RHEL6/input/system/software/updating.xml b/RHEL6/input/system/software/updating.xml
index 1e46dd0..4177d15 100644
--- a/RHEL6/input/system/software/updating.xml
+++ b/RHEL6/input/system/software/updating.xml
@@ -44,7 +44,7 @@ are from Red Hat.
 </rationale>
 <ident cce="26506-6"/>
 <oval id="package_red_hat_gpgkeys_installed" />
-<ref nist="SI-7" disa="351"/>
+<ref nist="SI-7,MA-1(b)" disa="351"/>
 <tested by="MM" on="20120928"/>
 </Rule>
 
@@ -76,7 +76,7 @@ protects against malicious tampering.
 </rationale>
 <ident cce="26709-6" />
 <oval id="yum_gpgcheck_global_activation" />
-<ref nist="SI-7" disa="352,663" />
+<ref nist="SI-7,MA-1(b)" disa="352,663" />
 <tested by="MM" on="20120928"/>
 </Rule>
 
@@ -101,7 +101,7 @@ protects against malicious tampering.
 </rationale>
 <ident cce="26647-8" />
 <oval id="ensure_gpgcheck_never_disabled" />
-<ref nist="SI-7" disa="352,663"/>
+<ref nist="SI-7,MA-1(b)" disa="352,663"/>
 <tested by="MM" on="20120928"/>
 </Rule>
 
@@ -129,7 +129,7 @@ to determine if the system is missing applicable updates.
 Installing software updates is a fundamental mitigation against
 the exploitation of publicly-known vulnerabilities.
 </rationale>
-<ref nist="SI-2" disa="1227,1233"/>
+<ref nist="SI-2,MA-1(b)" disa="1227,1233"/>
 <tested by="MM" on="20120928"/>
 </Rule>
 </Group>
-- 
1.7.1



More information about the scap-security-guide mailing list