+SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

The use of system calls SHOULD be restricted to the necessary minimum (e.g. by means of “seccomp”), particularly for exposed services and applications. The existing standard profiles and rules of SELinux and AppArmor, as well as of alternative extensions, SHOULD be checked manually and adapted as required to the security policy at hand. If necessary, new rules and profiles SHOULD be drawn up.

1. Visão geral

1.1 Referências

1.2 Requisitos identificados

1.3 Regulamentos relacionados

2. Requisitos identificados

Requisitos

3. Regulamentos relacionados

Regulamentos

Pedidos ligados

Ligações
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation