Commit d56813c3 authored by Valerie Aurora's avatar Valerie Aurora
Browse files

Correct name of least privilege mitigation

parent 447f4864

clauses/5.Requirements.md

+1 −1
Original line number Diff line number Diff line
@@ -445,7 +445,7 @@ Guidance: This is a "fail-closed" requirement - if something goes with the VPN c 
  * Verdict: All system configuration collected is at least as secure/restricted as before the VPN connection started => PASS, otherwise FAIL

  * Evidence: Collected system configuration, annotations of any configuration changes explaining why they are more restricted/secure, log messages from tests, method used to force connection to end without allowing shutdown tasks to run



#### 5.2.6.5 MI-CONF-4 VPN client does not degrade system security

#### 5.2.6.5 MI-CONF-4 VPN client shall not require unnecessary permissions



Custom VPN clients shall not require permissions that it does not need.