Skip to content

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • The operating system must employ automated mechanisms to prevent program execution in accordance with the organization-defined specifications.

    <VulnDiscussion>Operating systems are capable of providing a wide variety of functions and services. Execution must be disabled based on orga...
    Rule Medium Severity
  • SRG-OS-000183

    <GroupDescription></GroupDescription>
    Group
  • The operating system must disable information system functionality that provides the capability for automatic execution of code on mobile devices without user direction.

    &lt;VulnDiscussion&gt;Mobile devices include portable storage media (e.g., USB memory sticks, external hard disk drives) and portable computing and...
    Rule Medium Severity
  • SRG-OS-000324

    <GroupDescription></GroupDescription>
    Group
  • The system must restrict the ability of users to assume excessive privileges to members of a defined group and prevent unauthorized users from accessing administrative tools.

    &lt;VulnDiscussion&gt;Allowing any user to elevate their privileges can allow them excessive control of the system tools.&lt;/VulnDiscussion&gt;&lt...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules