Skip to content

Commit

Permalink
extend the explanation why ANSSI R52 requirement is manual
Browse files Browse the repository at this point in the history
  • Loading branch information
vojtapolasek committed Feb 27, 2024
1 parent c0135ba commit 9c6d747
Showing 1 changed file with 9 additions and 1 deletion.
10 changes: 9 additions & 1 deletion controls/anssi.yml
Original file line number Diff line number Diff line change
Expand Up @@ -1120,7 +1120,15 @@ controls:
title: Securing access for named sockets and pipes
levels:
- intermediary
notes: We cannot easily automate securing of named sockets and pipes in a general way.
notes: |-
The requirement states that all sockets and named pipes within all mounted
file systems should be checked. The check should look at the permissions
of the socket / pipe and compare them with permissions of the directory
which contains the particular socket. In case permissions of the directory
are less stricter than permissions of the socket, this should be
considered a finding. Since different use cases can require different
permissions for named pipes / sockets, it is not possible to perform this
check automatically.
status: manual

- id: R53
Expand Down

0 comments on commit 9c6d747

Please sign in to comment.