@@ -445,7 +445,7 @@ Guidance: This is a "fail-closed" requirement - if something goes with the VPN c
* Verdict: All system configuration collected is at least as secure/restricted as before the VPN connection started => PASS, otherwise FAIL
* Evidence: Collected system configuration, annotations of any configuration changes explaining why they are more restricted/secure, log messages from tests, method used to force connection to end without allowing shutdown tasks to run
#### 5.2.6.5 MI-CONF-4 VPN client does not degrade system security
#### 5.2.6.5 MI-CONF-4 VPN client shall not require unnecessary permissions
Custom VPN clients shall not require permissions that it does not need.