...
cjohns: this looks done, can you verify and remove from TODO? or if more needs to be done, can you leave it as a comment? thx - alexv 4/17
For FIO39-C. Do not read in from a stream directly following output to that stream Can we rewrite the NCCE and compliant solution as a function or use another mechanism so we don't need to specify the name of the device. Unfortunately device names such as "/dev/device2" appear to be OS specific. Perhaps check this section for other instances of this problem as well.
- done - alexv 4/22
...
The Risk Assessment Summary tables for each section need to be updated (they are out of date with the actual rules). - I got as far as EXP07, which still has the risk assessment for EXP10
...