The operating system must validate the binding of the reviewers identity to the information at the transfer/release point prior to release/transfer from one security domain to another security domain.

The operating system must validate the binding of the reviewers identity to the information at the transfer/release point prior to release/transfer from one security domain to another security domain.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33204	SRG-OS-000211-NA	SV-43605r1_rule		Medium

Description
This non-repudiation control enhancement is intended to mitigate the risk that information could be modified between review and transfer/release particularly when the transfer is occurring between security domains. Rationale for non-applicability: For the purposes of this SRG, a mobile OS is assumed to support a single security domain and a single user.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-07-03

Details

Check Text ( C-41468r1_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-37108r1_fix)
The requirement is NA. No fix is required.