Final Interpretation for RI # 232 – FDP_ROL statement

Date:

04/04/2005

Subject:

Editorial/Grammatical Change

CC Part #1 Reference:

 

CC Part #2 Reference:

FDP_ROL

CC Part #3 Reference:

 

CEM Reference:

 


Issue

 

FDP_ROL.1 has the following element:

 

FDP_ROL.1.1 The TSF shall enforce [assignment: access control SFP(s) and/or information flow control SFP(s)] to permit the rollback of the [assignment: list of operations] on the [assignment: list of objects].

 

Information is missing in the last assignment of the operations to rollback.

 

Interpretation

 

Correct "list of objects" to " information and/or list of objects".


Specific Changes

 

To address this interpretation, the following changes are made to CC v2.1, Part 2 FDP_ROL.1.1:

FDP_ROL.1.1      The TSF shall enforce [assignment: access control SFP(s) and/or information flow control SFP(s)] to permit the rollback of the [assignment: list of operations] on the [assignment: information and/or list of objects].

And to the correspondent assignment notes:

In FDP_ROL.1.1, the PP/ST author should specify the information and/or list of objects that are subjected to the rollback policy.

Rationale

 

This interpretation corrects the application of the rollback operation to information and/or list of objects.