+SYS.2.3.A8 Use of Techniques to Restrict the Rights of Applications (S)

SYS.2.3.A8 Use of Techniques to Restrict the Rights of Applications (S)

In order to restrict the access rights of applications to files, devices, and networks, AppArmor or SELinux SHOULD be used. The solutions with the best protection provided by the respective Unix derivative or Linux distribution SHOULD be selected. The necessary applications SHOULD be regulated through whitelisting instead of blacklisting. Extensions regarding the restriction of rights SHOULD be used in enforcing mode or by means of appropriate alternatives.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation