NIAP: View Technical Decision Details
NIAP/CCEVS
  NIAP  »»  Protection Profiles  »»  Technical Decisions  »»  View Details  
Archived TD0120:  FMT_SMF_EXT.1, Functions 2 & 5, Users and/or Administrators Configuration

Publication Date
2016.12.01

Protection Profiles
PP_MD_v2.0, PP_MD_v3.0

Other References
FMT_SMF_EXT.1

Issue Description

Several of the test activities for FMT_SMF_EXT.1.1 state that the tests be performed "as both the user and the administrator."  However, some of the functions are restricted (by the table) to be performed only by the administrators, and other functions give the ST author this options as well.  In the case that functions are restricted to an administrator (either because it's mandated or because the ST author chose to do so), there is no purpose in having the user attempt to exercise this function (the restriction test is covered by the test assurance activity for FMT_MOF_EXT.1.2).     

Resolution

The following Assurance Activities for FMT_SMF_EXT.1 should be modified as followed:     

Function 2, Test 2: "The evaluator shall exercise the TSF configuration as the administator..."

Function 4, Test 4: "The evaluator shall exercise the TSF configuration as the administator and, if not restricted to the administrator, the user, to..."

Function 5, Test 5a: "The evaluator shall exercise the TSF configuration as the administator and, if not restricted to the administrator, the user, to..."

Function 20, Test 20: "The evaluator shall exercise the TSF configuration as the administator and, if not restricted to the administrator, the user, to..."

Function 21, Test 21: "The evaluator shall exercise the TSF configuration as the administator and, if not restricted to the administrator, the user, to..."

Function 26, Test 26: "The evaluator shall exercise the TSF configuration as the administator and, if not restricted to the administrator, the user, to..."

Justification

There is no reason to test that a user can perform a function that has been restricted to the adminstrator.     

 
 
Site Map              Contact Us              Home