I am here with Shawn Wells today and we would like your help in developing the requirements for a possible inclusion of SELinux requirements to be included in the RHEL7 STIG. As we move away from legacy file permissions to type enforcement, we would like to work with the community to understand security relevant configuration options such as SELinux Booleans used in operational environments. To calm any fears associated with SELinux, we are only considering targeted policy and not the MLS enablement. Shawn will be working to gather your input. Any of your input would be appreciated if we could get it by Tuesday March 22, 2016 at the end of business.
OpenSCAP team is going to collect user feedback about SCAP Workbench GUI tool . If you are SCAP Workbench user, we would like to hear from you regarding your experiences with the product.
If you are interested, please subscribe here:
Once we receive your contact information, we will let you know about different feedback opportunities.
Have a nice day everyone,
Associate Software Engineer, UX
Yes. Greatly! Red Hat responds to industry generated CCE's while DISA will eventually generate CCI's mapped to their current STIG release?
Both SRG & CCI references appear to be falling from grace as far as providing stability for shared rule references (multi-platform from a Red Hat perspective),and ...we can only guess for DISA. I have an unrelated question to XCCDF_POLICY engine which I'll put in another thread. Thank you for clarification!
Has someone checked out the script in DISA's STIG Release? ->U_Red_Hat_Enterprise_Linux_7_V1R0-1_Manual_STIG/Test/stig_refs.sh
I find the instructions alarming on how to use the script.
It is to be placed in the RHEL 5 folder (scap-security-guide project) and run.....
....am I off in left field here?
What happens during make rhel7-dist -> content?
Is this where/how the DRAFT was created?
stig_overlay.sh of rhel6 appears to be same for rhel7. When completed what will rhel7 stig_overlay look like when rhel6 references are replaced? Should I be talking with DISA FSO or have I missed something in the Wiki or blogs?
DISA RHEL-7 Draft STIG references to "SRG-OS-000001-GPOS-00001" are new to me...Is this a new form of unified references? Somehow cross-referenced to "CCI"? I need some guidance here, or is it still being sorted out?
I really don't know how to phrase this question intelligently....can someone help me out?