For the MDF base scenario, the FDP_DEC_EXT and FDP_NET_EXT requirements do not make sense. Since the TSF in this case is handled as part of the MDF as a whole, it already has access to these services as a whole (since they are managed as part of the MDF).
FDP_DAR_EXT.1 is not quite so clear in the translation. I would probably create an MDF-specific SFR in the FE PPM that would be something like FDP_DAR_EXT.3 (called that because of the numbering in the MDF) that would detail FE for the PPM specifically. It would need to state something about selecting the sensitive data (though the term probably needs to be different since sensitive data is already being used as a term in the MDF).
For the MDF base scenario, the FDP_DEC_EXT and FDP_NET_EXT requirements do not make sense. Since the TSF in this case is handled as part of the MDF as a whole, it already has access to these services as a whole (since they are managed as part of the MDF).
FDP_DAR_EXT.1 is not quite so clear in the translation. I would probably create an MDF-specific SFR in the FE PPM that would be something like FDP_DAR_EXT.3 (called that because of the numbering in the MDF) that would detail FE for the PPM specifically. It would need to state something about selecting the sensitive data (though the term probably needs to be different since sensitive data is already being used as a term in the MDF).