SC-39 Process Isolation
All changes in this version
Title
Process Isolation
Control
Maintain a separate execution domain for each executing system process.
Discussion
Systems can maintain separate execution domains for each executing process by assigning each process a separate address space. Each system process has a distinct address space so that communication between processes is performed in a manner controlled through the security functions, and one process cannot modify the executing code of another process. Maintaining separate execution domains for executing processes can be achieved, for example, by implementing separate address spaces. Process isolation technologies, including sandboxing or virtualization, logically separate software and firmware from other software, firmware, and data. Process isolation helps limit the access of potentially untrusted software to other system resources. The capability to maintain separate execution domains is available in commercial operating systems that employ multi-state processor technologies.
Related controls
ac-25, ac-3, ac-4, ac-6, sa-8, sc-2, sc-3, si-16
Assessment objective
SC-39 a separate execution domain is maintained for each executing system process.
STIG rules that implement this control 3
Apple iOS/iPadOS 26 V1R3
- AIOS-26-009700 CAT II Apple iOS/iPadOS 26 must not allow non-DOD applications to access DOD data.
Apple iOS/iPadOS 27 V1R1
- AIOS-27-008800 CAT II Apple iOS/iPadOS 27 must not allow non-DoW applications to access DoW data.
Application Security and Development V6R5
- APSC-DV-002370 CAT II The application must maintain a separate execution domain for each executing process.