The operating system must enforce dual authorization, based on organizational policies and procedures for organization defined privileged commands.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32912	SRG-OS-000006-NA	SV-43310r1_rule		Medium

Description
Dual authorization mechanisms require two distinct approving authorities to approve the use of the command prior to it being invoked. An organization may determine certain commands or configuration changes require dual-authorization before being activated. The operating system must have the ability to enforce this dual authorization. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account.

Description

Dual authorization mechanisms require two distinct approving authorities to approve the use of the command prior to it being invoked. An organization may determine certain commands or configuration changes require dual-authorization before being activated. The operating system must have the ability to enforce this dual authorization. Rationale for non-applicability: For the purposes of this SRG, a mobile operating system is assumed to support a single human-accessible user account.

STIG	Date
Mobile Operating System Security Requirements Guide	2012-10-01

Details

Check Text ( C-41222r1_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-36831r1_fix)
The requirement is NA. No fix is required.