Xerox WorkCentre 5845 User Information page 47

FDP_ACF.1.1 (FUNC)
FDP_ACF.1.2 (FUNC)
FDP_ACF.1.3 (FUNC)
FDP_ACF.1.4 (FUNC)
Application Note: This SFR is FDP_ACF.1 (b) from The IEEE Std. 2600.2
PP.
6.3.4.5. FDP_IFC.1 (FILTER) Subset information flow control
Hierarchical to:
Dependencies:
FDP_IFC.1.1 (FILTER)
6.3.4.6. FDP_IFF.1 (FILTER) Simple security attributes
Hierarchical to:
Dependencies:
FDP_IFF.1.1 (FILTER)
Copyright
Xerox Multi-Function Device Security Target
The TSF shall enforce the [TOE Function Access
Control SFP] to objects based on the following: [Users
and their role based permissions to perform any or all of
the following functions: print, scan, copy, fax, document
storage and retrieval,
interface].
The TSF shall enforce the following rules to
determine if an operation among controlled subjects and
controlled objects is allowed: [users assigned to a role
that is explicitly authorized by U.ADMINISTATOR
(System Administrator) to use a function is allowed to
access the function].
The TSF shall explicitly authorise access of
subjects to objects based on the following additional
rules: [none].
The TSF shall explicitly deny access of subjects to
objects based on the [none].
No other components.
FDP_IFF.1 Simple security attributes
The TSF shall enforce the [IPFilter SFP] on [
Subjects: External entities that send traffic to the
-
TOE;
Information: All
-
source/destination;
Operations: send or receive network traffic].
-
No other components.
FDP_IFC.1 Subset information flow control
FMT_MSA.3 Static attribute initialization.
The TSF shall enforce the [IPFilter SFP] based on
the following types of subject and information security
attributes: [
Subjects: External entities that send traffic to the TOE
-
o IP address,
47

2013 Xerox Corporation. All rights reserved.
access to shared-medium
IP-based traffic to/from that