From 1f1be09ae7b1f3ed43f900794fb18172f67e7e85 Mon Sep 17 00:00:00 2001
From: Jesse Sightler <jsightle@redhat.com>
Date: Tue, 5 Mar 2013 17:49:02 -0500
Subject: [PATCH] Initial pass of SRG references added.

---
 JBossEAP5/eap5-xccdf.xml |  342 ++++++++++++++++++++++++++++++---------------
 1 files changed, 228 insertions(+), 114 deletions(-)

diff --git a/JBossEAP5/eap5-xccdf.xml b/JBossEAP5/eap5-xccdf.xml
index 7ef947d..393f02d 100644
--- a/JBossEAP5/eap5-xccdf.xml
+++ b/JBossEAP5/eap5-xccdf.xml
@@ -191,7 +191,8 @@
 				</check>-->
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:200001"/>
-			</check>
+			</check>
+            <ref disa="269"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2002"><!--Ensure Java Runtime Environment in use is the correct version-->
@@ -228,7 +229,8 @@
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:200201"/>
-			</check>
+			</check>
+            <ref disa="269"/>
 		</Rule>
 					
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2005"><!--Ensure all configurations are made to the appropriate server profile-->
@@ -246,7 +248,8 @@
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:200501"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2018"><!--Ensure Technology Preview components are disabled-->
@@ -267,7 +270,8 @@
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:201801"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 						
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1130"><!--Disable Hot Deployment in production-->
@@ -287,7 +291,8 @@
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:113001"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 					
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1101"><!--Production applications should not implement the default SRPVerifierStore interface for the Secure Remote Password (SRP) protocol-->
@@ -305,7 +310,8 @@
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110101"/>
-			</check>
+			</check>
+            <ref disa="142"/>
 		</Rule>
 						
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2039"><!--Declare an EJB Authorization Policy-->
@@ -348,7 +354,8 @@
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:203901"/>
-			</check>
+			</check>
+            <ref disa="33"/>
 		</Rule>
 					
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2042"><!--Ensure appropriate permissions have been granted to Java Database Connectivity (JDBC) driver-->
@@ -378,7 +385,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:204201"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 						
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2044"><!--Ensure appropriate DefaultDS is enabled-->
@@ -401,7 +409,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:204401"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2157"><!--Deployed applications must not write data to DefaultDS-->
@@ -424,7 +433,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:215701"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2045"><!--Ensure default HSQLDB is disabled-->
@@ -456,7 +466,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:204501"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2046"><!--Ensure HSQLDB Security Domain is removed-->
@@ -491,7 +502,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:204601"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2047"><!--Ensure the appropriate Java Messaging Service (JMS) persistence configuration file is in use-->
@@ -516,7 +528,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:204701"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2050"><!--Ensure Oracle Database persistence plugin is set correctly-->
@@ -544,7 +557,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205001"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2065"><!--Ensure IBM JRE 16 is configured correctly-->
@@ -567,7 +581,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206501"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1100"><!--Configured security domains are recommended to secure production applications-->
@@ -595,7 +610,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110001"/>
-			</check>
+			</check>
+            <ref disa="31"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2038"><!--The allRolesMode must be configured to "strict"-->
@@ -616,7 +632,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:203801"/>
-			</check>
+			</check>
+            <ref disa="33"/>
 		</Rule>
 					
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1092"><!--Define &lt;security-role&gt; elements-->
@@ -651,7 +668,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:109201"/>
-			</check>
+			</check>
+            <ref disa="33"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3001"><!--Remove, rename, or comment out the default user accounts from production servers-->
@@ -715,7 +733,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:300101"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3002"><!--Remove, rename, or comment out the default roles from production servers-->
@@ -788,7 +807,8 @@ grant codeBase "file:${JBoss.server.home.dir}/lib/[JDBC.DRIVER]" {
 			</check>
 			<!--<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 			<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:300201"/>
-		</check>-->
+		</check>-->
+            <ref disa="141"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1093"><!--Security constraint elements should exist for all URLs in production environment-->
@@ -809,7 +829,8 @@ All deployed applications should restrict HTTP verbs.</xhtml:p> JBoss administra
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:109301"/>
-			</check>
+			</check>
+            <ref disa="33"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1096"><!--DefaultCacheTimeout must be configured properly for active security domains-->
@@ -834,7 +855,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:109601"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2009"><!--SNMP must not be deployed-->
@@ -853,7 +875,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:200901"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4011"><!--Harden Connector: limit maxPostSize-->
@@ -872,7 +895,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:401101"/>
-			</check>
+			</check>
+            <ref disa="245"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4012"><!--Harden Connector: limit maxSavePostSize-->
@@ -891,7 +915,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:401201"/>
-			</check>
+			</check>
+            <ref disa="245"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4013"><!--Harden Connector: set server header tags-->
@@ -909,7 +934,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:401301"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4014"><!--Harden Connector: ciphers attribute-->
@@ -927,7 +953,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:401401"/>
-			</check>
+			</check>
+            <ref disa="179"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4015"><!--Harden Connector: limit connectionTimeout-->
@@ -946,7 +973,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:401501"/>
-			</check>
+			</check>
+            <ref disa="245"/>
 		</Rule>
 		
 		
@@ -976,7 +1004,8 @@ If you want to disable caching of security credentials, set this to 0 to force a
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:204301"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2051"><!--Ensure proper permissions are configured for interactions with JBoss JMX Kernel MBean-->
@@ -1022,7 +1051,8 @@ grant {
 			<fixtext>The JBoss administrator must assign the most restrictive permissions possible (in accordance with the least privilege principle) for MBeans. This should be done in cooperation with system administrators, application developers and/or application documentation.</fixtext>			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205101"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2052"><!--Ensure proper permissions are configured for deployed applications: java.io.FilePermission-->
@@ -1059,7 +1089,8 @@ grant codeBase "file:${JBoss.server.home.dir}/deploy/userApplication/" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205201"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2053"><!--Ensure proper permissions are configured for deployed applications: java.net.NetPermission-->
@@ -1089,7 +1120,8 @@ grant codeBase "file:${JBoss.server.home.dir}/deploy/userApplication/" {
 				
 				<check system="http://scap.nist.gov/schema/ocil/2">
 					<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205301"/>
-				</check>
+				</check>
+            <ref disa="285"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2054"><!--Ensure proper permissions are configured for deployed applications: java.lang.RuntimePermission-->
@@ -1117,7 +1149,8 @@ grant codeBase "file:${JBoss.server.home.dir}/deploy/userApplication/" {
 				
 				<check system="http://scap.nist.gov/schema/ocil/2">
 					<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205401"/>
-				</check>
+				</check>
+            <ref disa="285"/>
 			</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2055"><!--Ensure proper permissions are configured for deployed applications: java.net.SocketPermission-->
@@ -1146,7 +1179,8 @@ grant codeBase "file:${JBoss.server.home.dir}/deploy/userApplication/" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205501"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2056"><!--Ensure proper permissions are configured for deployed applications: java.security.AllPermission-->
@@ -1175,7 +1209,8 @@ grant codeBase "file:${JBoss.server.home.dir}/deploy/userApplication/" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205601"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2028"><!--Ensure default system JAAS configuration is in use for JBoss Seam-->
@@ -1200,7 +1235,8 @@ grant codeBase "file:${JBoss.server.home.dir}/deploy/userApplication/" {
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:202801"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2060"><!--Validate a password-protected JBoss keystore is configured in a loaded policy file-->
@@ -1228,7 +1264,8 @@ keystorePasswordURL "file:${JBoss.server.home.dir}/cc.password";</xhtml:code></x
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206001"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2059"><!--Validate a keystore file for JBoss exists and is accessible to JBoss-->
@@ -1251,7 +1288,8 @@ keystorePasswordURL "file:${JBoss.server.home.dir}/cc.password";</xhtml:code></x
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205901"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 								
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2160"><!--Validate a password file for keystore exists and is accessible to JBoss-->
@@ -1276,7 +1314,8 @@ keystorePasswordURL "file:${JBoss.server.home.dir}/cc.password";</xhtml:code></x
 		
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:216001"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 	
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2158"><!--Validate JBoss keystore is password protected-->
@@ -1302,7 +1341,8 @@ keystorePasswordURL "file:${JBoss.server.home.dir}/cc.password";</xhtml:code></x
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:215801"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 	
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2061"><!--Ensure jboss alias is trusted within the JBoss keystore-->
@@ -1338,7 +1378,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206101"/>
-			</check>
+			</check>
+            <ref disa="285"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4005"><!--Ensure applications deployed by JBoss present valid DoD certificates where applicable-->
@@ -1377,7 +1418,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400501"/>
-			</check>
+			</check>
+            <ref disa="205"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4006"><!--Ensure JBoss trust store contains DoD approved Certificate Authorities-->
@@ -1401,7 +1443,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400601"/>
-			</check>
+			</check>
+            <ref disa="205"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4007"><!--Ensure deployed applications requiring authentication utilizes DoD PKI Class 3 or Class 4 certificate and hardware security token or NSA-certified product (cert-based module)-->
@@ -1516,7 +1559,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400701"/>
-			</check>				
+			</check>				
+            <ref disa="194,195"/>
 		</Rule>
 		
 		<!--Ensure revocation checking is configured for two-way X.509 certificate exchanges-->
@@ -1579,7 +1623,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400801"/>
-			</check>
+			</check>
+            <ref disa="197"/>
 		</Rule>	
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1136"><!--Eliminate clear-text passwords: data sources-->
@@ -1601,7 +1646,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:113601"/>
-			</check>
+			</check>
+            <ref disa="171"/>
 		</Rule>		
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1163"><!--Eliminate clear-text passwords: Tomcat Connectors-->
@@ -1623,7 +1669,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 				
 				<check system="http://scap.nist.gov/schema/ocil/2">
 					<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:116301"/>
-				</check>
+				</check>
+            <ref disa="171"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1165"><!--Eliminate clear-text passwords: XML configuration files-->
@@ -1643,7 +1690,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:116501"/>
-			</check>
+			</check>
+            <ref disa="171"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4002"><!--Change default password: JBoss Messaging MessageSucker-->
@@ -1674,7 +1722,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400201"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4003"><!--Change default password: Java cacerts keystore-->
@@ -1705,7 +1754,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400301"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2019"><!--Ensure Security Audit Appender is enabled-->
@@ -1733,7 +1783,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:201901"/>
-			</check>
+			</check>
+            <ref disa="30"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2020"><!--Ensure Security Audit Provider is enabled-->
@@ -1757,7 +1808,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:202001"/>
-			</check>
+			</check>
+            <ref disa="30"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2021"><!--Ensure Configure SecurityInterceptor logging level is set correctly-->
@@ -1780,7 +1832,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:202101"/>
-			</check>
+			</check>
+            <ref disa="30"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2022"><!--Ensure logging is enabled for Microcontainer bootstrap operations-->
@@ -1803,7 +1856,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:202201"/>
-			</check>
+			</check>
+            <ref disa="237"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2023"><!--Ensure logging is enabled for web-based requests if required by deployed applications-->
@@ -1832,7 +1886,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:202301"/>
-			</check>
+			</check>
+            <ref disa="237"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2024"><!--Ensure all required information is displayed in &lt;layout&gt;-->
@@ -1856,7 +1911,8 @@ Certificate fingerprint (MD5): 93:F2:F1:8B:EF:8A:E0:E3:D0:E7:69:BC:69:96:29:C1</
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:202401"/>
-			</check>
+			</check>
+            <ref disa="237"/>
 		</Rule>
 				
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1103"><!--Production applications should not log output to the JBoss console-->
@@ -1881,7 +1937,8 @@ setting a default via ${jboss.server.log.threshold:WARN} will not work.--&gt;
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:110301"/>
-			</check>
+			</check>
+            <ref disa="237"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4004"><!--Ensure JBoss process owner is executing with least privilege-->
@@ -1911,7 +1968,8 @@ setting a default via ${jboss.server.log.threshold:WARN} will not work.--&gt;
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400401"/>
-			</check>
+			</check>
+            <ref disa="64"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1099"><!--Deny the JBoss process owner console access-->
@@ -1935,7 +1993,8 @@ setting a default via ${jboss.server.log.threshold:WARN} will not work.--&gt;
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:109901"/>
-			</check>
+			</check>
+            <ref disa="64"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1162"><!--Set JBoss file ownership-->
@@ -1958,7 +2017,8 @@ setting a default via ${jboss.server.log.threshold:WARN} will not work.--&gt;
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:116201"/>
-			</check>
+			</check>
+            <ref disa="64"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1098"><!--Set JBoss file permissions-->
@@ -1982,7 +2042,8 @@ setting a default via ${jboss.server.log.threshold:WARN} will not work.--&gt;
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:109801"/>
-			</check>
+			</check>
+            <ref disa="64"/>
 		</Rule>
 			
 	</Group>
@@ -2066,7 +2127,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:200601"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2007"><!--Ensure Web Console is either secured or removed-->
@@ -2141,7 +2203,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:200701"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2008"><!--Ensure Administration Console is either secured or removed-->
@@ -2216,7 +2279,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			</fixtext>
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:200801"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 	
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2029"><!--The JMXInvokerServlet servlet must be secured against web attacks-->
@@ -2243,7 +2307,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:202901"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2030"><!--The JMXInvokerServlet servlet must be configured to prevent unprivileged access using authentication-->
@@ -2279,7 +2344,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:203001"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2031"><!--The JMXInvokerServlet servlet must be configured to prevent unprivileged access using authorization-->
@@ -2315,7 +2381,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://oval.mitre.org/XMLSchema/oval-definitions-5">
 				<check-content-ref href="eap5-oval.xml" name="oval:com.redhat.eap5.scap:def:203101"/>
-			</check>
+			</check>
+            <ref disa="33"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3006" selected="false"><!--Deployed applications should display a system use banner upon access-->
@@ -2342,7 +2409,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<!--<check-export value-id="warning_banner_text" export-name="ocil:com.redhat.eap5.scap:variable:300601"/> SCC does not recognize OCIL variables-->
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:300601"/>
-			</check>
+			</check>
+            <ref disa="68,70"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3007" selected="false"><!--Deployed applications should display a classification banner when required-->
@@ -2361,7 +2429,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:300701"/>
-			</check>
+			</check>
+            <ref disa="13"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2015"><!--Password hashing must be enabled within the appropriate login module-->
@@ -2403,7 +2472,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:201501"/>
-			</check>
+			</check>
+            <ref disa="171"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2017"><!--A password hashing algorithm must be defined within the appropriate login module-->
@@ -2443,7 +2513,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:201701"/>
-			</check>
+			</check>
+            <ref disa="171"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2068"><!--Enterprise JavaBeans Specification v2.1 must be strictly followed-->
@@ -2481,7 +2552,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206801"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 		
 		</Group>
@@ -2506,7 +2578,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206201"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2063"><!--Assign a JBoss administrator-->
@@ -2526,7 +2599,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206301"/>
-			</check>
+			</check>
+            <ref disa="62"/>
 		</Rule>			
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1129"><!--Document incident response procedures-->
@@ -2548,7 +2622,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112901"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1133"><!--Perform periodic incident response exercises-->
@@ -2565,7 +2640,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:113301"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1132"><!--Document disaster recovery procedures-->
@@ -2582,7 +2658,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:113201"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 						
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1134"><!--Perform periodic disaster recovery exercises-->
@@ -2599,7 +2676,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:113401"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1135"><!--Identify and document application data flows-->
@@ -2629,7 +2707,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:113501"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1159"><!--Java permissions for deployed applications should be documented and reviewed prior to deployment-->
@@ -2648,7 +2727,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:115901"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 						
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1146"><!--Regular backups should be performed-->
@@ -2665,7 +2745,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:114601"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1153"><!--Auditing policy should exist-->
@@ -2683,7 +2764,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:115301"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1164"><!--Access control policy and procedures-->
@@ -2700,7 +2782,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:116401"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3003"><!--Define an appropriate minimum and maximum password length requirement-->
@@ -2731,7 +2814,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:300301"/>
-			</check>
+			</check>
+            <ref disa="164,165"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3004"><!--Define an appropriate minimum password complexity requirement-->
@@ -2761,7 +2845,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 					NIST Special Publication 800-118 (Draft) and NIST Special Publication 800-53 both contain extensive guidance on creating a password policy document.</xhtml:p></fixtext>			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:300401"/>
-			</check>
+			</check>
+            <ref disa="166,167,168,169"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_3005"><!--Define an appropriate minimum password expiration interval-->			
@@ -2793,7 +2878,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:300501"/>
-			</check>
+			</check>
+            <ref disa="174"/>
 		</Rule>
 			
 	</Group>
@@ -2816,7 +2902,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:400101"/>
-			</check>
+			</check>
+            <ref disa="64"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1124"><!--Avoid multiple JBoss instances per server-->
@@ -2834,7 +2921,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112401"/>
-			</check>
+			</check>
+            <ref disa="64"/>
 		</Rule>
 		
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1131"><!--Bind multiple JBoss instances per server to different IPs-->
@@ -2853,7 +2941,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:113101"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2064"><!--Packet filtering should be emplaced around JBoss Enterprise Application Platform-->
@@ -2873,7 +2962,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:206401"/>
-			</check>
+			</check>
+            <ref disa="252,55"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1094"><!--Do not transmit sensitive information over unsecured HTTP connections-->
@@ -2910,7 +3000,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:109401"/>
-			</check>
+			</check>
+            <ref disa="230,264"/>
 		</Rule>	
 	</Group>
 				
@@ -2935,7 +3026,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110401"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 						
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1125"><!--Automate JBoss Deployments-->
@@ -2953,7 +3045,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112501"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1127"><!--Application performance testing-->
@@ -2971,7 +3064,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112701"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 			
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1128"><!--Monitor JBoss servers-->
@@ -3003,7 +3097,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112801"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>
 					
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_2057"><!--Ensure all downloaded software is authentic-->
@@ -3023,7 +3118,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:205701"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>	
 	
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_4010"><!--Ensure JBoss is configured in accordance with Common Criteria configuration guides-->
@@ -3041,7 +3137,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 			
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:401001"/>
-			</check>
+			</check>
+            <ref disa="NOTYET"/>
 		</Rule>		
 		
 	</Group>		
@@ -3072,7 +3169,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110601"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1107"><!--Unused features should be disabled or deleted: Enterprise Java Beans (EJB) Services-->
@@ -3113,7 +3211,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110701"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1108"><!--Unused features should be disabled or deleted: Universal Unique Identifier (UUID) Generator-->
@@ -3136,7 +3235,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110801"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1109"><!--Unused features should be disabled or deleted: Java Message Service (JMS)-->
@@ -3185,7 +3285,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:110901"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1110"><!--Unused features should be disabled or deleted: JBoss Mail-->
@@ -3210,7 +3311,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111001"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1111"><!--Unused features should be disabled or deleted: JBoss Scheduling-->
@@ -3235,7 +3337,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111101"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1112"><!--Unused features should be disabled or deleted: Hypersonic SQL Database (HSQLDB)-->
@@ -3266,7 +3369,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111201"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1113"><!--Unused features should be disabled or deleted: BeanShell (BSH) Deployer-->
@@ -3289,7 +3393,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111301"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1114"><!--Unused features should be disabled or deleted: JBossWS-->
@@ -3322,7 +3427,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111401"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1115"><!--Unused features should be disabled or deleted: Seam-->
@@ -3347,7 +3453,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111501"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1116"><!--Unused features should be disabled or deleted: JBoss Internet Inter-ORB Protocol (IIOP)-->
@@ -3391,7 +3498,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111601"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1117"><!--Unused features should be disabled or deleted: Miscellaneous-->
@@ -3429,7 +3537,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111701"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1118"><!--Unused features should be disabled or deleted: HTTP Invokers-->
@@ -3460,7 +3569,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111801"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1119"><!--Unused features should be disabled or deleted: Java Management Extensions (JMX) Invoker-->
@@ -3483,7 +3593,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:111901"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1120"><!--Unused features should be disabled or deleted: Pooled Invoker-->
@@ -3506,7 +3617,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112001"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1121"><!--Unused features should be disabled or deleted: Java Remote Method Protocol (JRMP) Invoker-->
@@ -3529,7 +3641,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 		<check system="http://scap.nist.gov/schema/ocil/2">
 			<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112101"/>
-		</check>
+		</check>
+            <ref disa="141"/>
 	</Rule>
 
 		<Rule id="xccdf_com.redhat.eap5.scap_rule_1123"><!--Unused features should be disabled or deleted: Clustering-->
@@ -3570,7 +3683,8 @@ admin=1qaz!QAZ2wsx@WSX</xhtml:code></xhtml:pre></xhtml:li>
 
 			<check system="http://scap.nist.gov/schema/ocil/2">
 				<check-content-ref href="eap5-ocil.xml" name="ocil:com.redhat.eap5.scap:questionnaire:112301"/>
-			</check>
+			</check>
+            <ref disa="141"/>
 		</Rule>
 	</Group>
 </Benchmark>
-- 
1.7.1

