Xerox WorkCentre 5875 - Page 47

Xerox Multi-Function Device Security Target
47
Copyright

2013 Xerox Corporation. All rights reserved.
FDP_ACF.1.1 (FUNC) The TSF shall enforce the [TOE Function Access
Control SFP] to objects based on the following: [Users
and their role based permissions to perform any or all of
the following functions: print, scan, copy, fax, document
storage and retrieval, access to shared-medium
interface].
FDP_ACF.1.2 (FUNC) The TSF shall enforce the following rules to
determine if an operation among controlled subjects and
controlled objects is allowed: [users assigned to a role
that is explicitly authorized by U.ADMINISTATOR
(System Administrator) to use a function is allowed to
access the function].
FDP_ACF.1.3 (FUNC) The TSF shall explicitly authorise access of
subjects to objects based on the following additional
rules: [none].
FDP_ACF.1.4 (FUNC) The TSF shall explicitly deny access of subjects to
objects based on the [none].
Application Note: This SFR is FDP_ACF.1 (b) from The IEEE Std. 2600.2
PP.
6.3.4.5. FDP_IFC.1 (FILTER) Subset information flow control
Hierarchical to: No other components.
Dependencies: FDP_IFF.1 Simple security attributes
FDP_IFC.1.1 (FILTER) The TSF shall enforce the [IPFilter SFP] on [
- Subjects: External entities that send traffic to the
TOE;
- Information: All IP-based traffic to/from that
source/destination;
- Operations: send or receive network traffic].
6.3.4.6. FDP_IFF.1 (FILTER) Simple security attributes
Hierarchical to: No other components.
Dependencies: FDP_IFC.1 Subset information flow control
FMT_MSA.3 Static attribute initialization.
FDP_IFF.1.1 (FILTER) The TSF shall enforce the [IPFilter SFP] based on
the following types of subject and information security
attributes: [
- Subjects: External entities that send traffic to the TOE
o IP address,