Changes for clauses/5.Requirements.md: 1 added line, 1 removed line.
Original line number
Diff line number
Diff line
@@ -445,7 +445,7 @@ Guidance: This is a "fail-closed" requirement - if something goes with the VPN c
* Verdict: All system configuration collected is at least as secure/restricted as before the VPN connection started => PASS, otherwise FAIL
* Evidence: Collected system configuration, annotations of any configuration changes explaining why they are more restricted/secure, log messages from tests, method used to force connection to end without allowing shutdown tasks to run
#### 5.2.6.5 MI-CONF-4 VPN client does not degrade system security
#### 5.2.6.5 MI-CONF-4 VPN client shall not require unnecessary permissions
Custom VPN clients shall not require permissions that it does not need.