[PATCH 06/20] Mapped AU-6* to procedural requirements

Shawn Wells shawn.d.wells at gmail.com
Sat Jan 12 18:18:44 UTC 2013


-------------- next part --------------
>From aab8605f3d5305a2d81a29d4a78a428a7a3f2395 Mon Sep 17 00:00:00 2001
From: Shawn Wells <shawn at redhat.com>
Date: Thu, 10 Jan 2013 08:02:35 -0500
Subject: [PATCH 06/20] Mapped AU-6* to procedural requirements

AU-6(a):	Review and analysis of logs for unusual activity
AU-6(b):	Dynamic levels of audit review
AU-6(3):	Audit data review across multiple repositories

The above are procedural and NA for OS configuration
---
 RHEL6/input/auxiliary/nist_support.xml |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/RHEL6/input/auxiliary/nist_support.xml b/RHEL6/input/auxiliary/nist_support.xml
index d1bb239..9ffc7b3 100644
--- a/RHEL6/input/auxiliary/nist_support.xml
+++ b/RHEL6/input/auxiliary/nist_support.xml
@@ -14,7 +14,7 @@ automated means.</rational>
 <description>This requirement is procedural, and can not be met
 through automated means.</description>
 </description>
-<ref nist="AC-1,AC-2,AC-2(7)(a),AC-5,AC-6(1),AC-8(b),AC-11(b),AC-14,AC-17(a),AC-17(b),AC-17(4),AC-17(5),AC-17(6),AC-19(b),AC-19(1),AC-19(2),AC-19(3),AC-19(4)(a),AC-19(4)(b),AC-20(a),AC-20(b),AC-20(1)(a),AC-20(1)(b),AC-20(2),AC-21(a),AC-21(b),AC-22(a),AC-22(b),AC-22(c),AC-22(d),AC-22(e),AU-2(b),AU-2(3),AT-1(a),AT-1(b),AT-2,AT-3,AT-3(2),AT-4(a),AT-4(b),AT-5,AU-1(a)" \>
+<ref nist="AC-1,AC-2,AC-2(7)(a),AC-5,AC-6(1),AC-8(b),AC-11(b),AC-14,AC-17(a),AC-17(b),AC-17(4),AC-17(5),AC-17(6),AC-19(b),AC-19(1),AC-19(2),AC-19(3),AC-19(4)(a),AC-19(4)(b),AC-20(a),AC-20(b),AC-20(1)(a),AC-20(1)(b),AC-20(2),AC-21(a),AC-21(b),AC-22(a),AC-22(b),AC-22(c),AC-22(d),AC-22(e),AU-2(b),AU-2(3),AU-6(a),AU-6(b),AU-6(3),AT-1(a),AT-1(b),AT-2,AT-3,AT-3(2),AT-4(a),AT-4(b),AT-5,AU-1(a)" \>
 </Rule>
 
 <Rule id="nist_not_OS_applicable">
-- 
1.7.1



More information about the scap-security-guide mailing list