The operating system must enforce approved authorizations for controlling the flow of information between interconnected systems in accordance with applicable policy.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-33253	SRG-OS-000242-NA	SV-43672r1_rule		Medium

Description
Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information) and without explicit regard to subsequent accesses to the information. Rationale for non-applicability: Resource constraints on mobile devices preclude implementation of all IA functions. The applicability of this control may be reconsidered at a future date if subsequent generations of mobile devices are better able to support this control and the applications and data typically on the device justify its implementation.

Description

Information flow control regulates where information is allowed to travel within an information system and between information systems (as opposed to who is allowed to access the information) and without explicit regard to subsequent accesses to the information. Rationale for non-applicability: Resource constraints on mobile devices preclude implementation of all IA functions. The applicability of this control may be reconsidered at a future date if subsequent generations of mobile devices are better able to support this control and the applications and data typically on the device justify its implementation.

STIG	Date
Mobile Operating System Security Requirements Guide	2013-07-03

Details

Check Text ( C-41550r2_chk )
This requirement is NA for the Mobile OS SRG.

Fix Text (F-37183r2_fix)
The requirement is NA. No fix is required.