+SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

The use of system calls SHOULD be restricted to the necessary minimum (e.g. by means of “seccomp”), particularly for exposed services and applications. The existing standard profiles and rules of SELinux and AppArmor, as well as of alternative extensions, SHOULD be checked manually and adapted as required to the security policy at hand. If necessary, new rules and profiles SHOULD be drawn up.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation