+SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

SYS.2.3.A17 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

The use of system calls SHOULD be restricted to the necessary minimum (e.g. by means of “seccomp”), particularly for exposed services and applications. The existing standard profiles and rules of SELinux and AppArmor, as well as of alternative extensions, SHOULD be checked manually and adapted as required to the security policy at hand. If necessary, new rules and profiles SHOULD be drawn up.

1. Prehľad

1.1 Odkazy

1.2 Identifikované požiadavky

1.3 Súvisiace predpisy

2. Identifikované požiadavky

Požiadavky

3. Súvisiace predpisy

Predpisy

Prepojené úlohy

Prepojenia
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation