From shannon.mitchell at merlintechs.com Thu Aug 20 11:31:49 2015 Content-Type: multipart/mixed; boundary="===============3987194778409490392==" MIME-Version: 1.0 From: Shannon Mitchell To: scap-security-guide at lists.fedorahosted.org Subject: Re: disa-stig-rhel5-v1r0.6-xccdf-manual.xml Date: Tue, 07 Aug 2012 15:20:22 -0400 Message-ID: In-Reply-To: CAOa+pVivvfCCws8wwpVtP53cfGD-vOj4vTcSFewaZzmNG+j7Sw@mail.gmail.com --===============3987194778409490392== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Every gen Id in the benchmark is in the manual. The manual contains all 350 plus an extra 219. On Aug 7, 2012 1:41 PM, "Willem Bos" wrote: > Hi Jeffrey, > > Are you sure disa-stig-rhel5-v1r0.6-xccdf-manual.xml is based on > disa-stig-rhel5-v1r0.6-xccdf.xml? > > The *-manual.xml file contains a lot more GEN* tags : > > grep -c 'GEN' U_RedHat_5_V1R0.6_STIG_Benchmark-xccdf.xml > 350 > > grep -c '<title>GEN' > scap-security-guide/RHEL6/references/disa-stig-rhel5-v1r0.6-xccdf.xml > 350 > > grep -c '<title>GEN' > > scap-security-guide/RHEL6/references/disa-stig-rhel5-v1r0.6-xccdf-manual.= xml > 569 > > Maybe I'm missing something obvious but like I said, I'm new to this stuff > :) > > Regards, > Willem. > > > On Mon, Aug 6, 2012 at 4:20 PM, Jeffrey Blank <blank(a)eclipse.ncsc.mil> > wrote: > > This should be the same semantically (as the authoritative version from > > iase.disa.mil) -- I just ran it through xmllint (or was it tidy?) to > > make it readable in a text editor. (And yes, I should have documented > > this.) > > > > I really can't remember which, but if you'd like to do a quick re-run of > > each and compare, it would certainly be good for us to document its > > congruence with the official version :) > > > > (Also note that we are not the maintainers of that content for RHEL 5.) > > > > > > > > > > On 08/06/2012 03:00 AM, Willem Bos wrote: > >> Hi All, > >> > >> The GIT repo contains the file > >> RHEL6/references/disa-stig-rhel5-v1r0.6-xccdf-manual.xml. This is not > >> part of the zipfile you can download from > >> http://web.nvd.nist.gov/view/ncp/repository/checklist/download?id=3D10= 59. > >> > >> I could not find a Makefile target that creates it. What is its origin? > >> > >> Regards, > >> Willem. > >> _______________________________________________ > >> scap-security-guide mailing list > >> scap-security-guide(a)lists.fedorahosted.org > >> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > > _______________________________________________ > > scap-security-guide mailing list > > scap-security-guide(a)lists.fedorahosted.org > > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > --===============3987194778409490392== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" PHAgZGlyPSJsdHIiPkV2ZXJ5IGdlbiBJZCBpbiB0aGUgYmVuY2htYXJrIGlzIGluIHRoZSBtYW51 YWwuoCBUaGUgbWFudWFsIGNvbnRhaW5zIGFsbCAzNTAgcGx1cyBhbiBleHRyYSAyMTkuPC9wPgo8 ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+T24gQXVnIDcsIDIwMTIgMTo0MSBQTSwgJnF1b3Q7V2ls bGVtIEJvcyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOndoYm9zQHhzNGFsbC5ubCI+d2hib3NA eHM0YWxsLm5sPC9hPiZndDsgd3JvdGU6PGJyIHR5cGU9ImF0dHJpYnV0aW9uIj48YmxvY2txdW90 ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVm dDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4KSGkgSmVmZnJleSw8YnI+Cjxicj4K QXJlIHlvdSBzdXJlIGRpc2Etc3RpZy1yaGVsNS12MXIwLjYteGNjZGYtbWFudWFsLnhtbCBpcyBi YXNlZCBvbjxicj4KZGlzYS1zdGlnLXJoZWw1LXYxcjAuNi14Y2NkZi54bWw/PGJyPgo8YnI+ClRo ZSAqLW1hbnVhbC54bWwgZmlsZSBjb250YWlucyBhIGxvdCBtb3JlICZsdDt0aXRsZSZndDtHRU4q Jmx0Oy90aXRsZSZndDsgdGFncyA6PGJyPgo8YnI+CmdyZXAgLWMgJiMzOTsmbHQ7dGl0bGUmZ3Q7 R0VOJiMzOTsgVV9SZWRIYXRfNV9WMVIwLjZfU1RJR19CZW5jaG1hcmsteGNjZGYueG1sPGJyPgoz NTA8YnI+Cjxicj4KZ3JlcCAtYyAmIzM5OyZsdDt0aXRsZSZndDtHRU4mIzM5Ozxicj4Kc2NhcC1z ZWN1cml0eS1ndWlkZS9SSEVMNi9yZWZlcmVuY2VzL2Rpc2Etc3RpZy1yaGVsNS12MXIwLjYteGNj ZGYueG1sPGJyPgozNTA8YnI+Cjxicj4KZ3JlcCAtYyAmIzM5OyZsdDt0aXRsZSZndDtHRU4mIzM5 Ozxicj4Kc2NhcC1zZWN1cml0eS1ndWlkZS9SSEVMNi9yZWZlcmVuY2VzL2Rpc2Etc3RpZy1yaGVs NS12MXIwLjYteGNjZGYtbWFudWFsLnhtbDxicj4KNTY5PGJyPgo8YnI+Ck1heWJlIEkmIzM5O20g bWlzc2luZyBzb21ldGhpbmcgb2J2aW91cyBidXQgbGlrZSBJIHNhaWQsIEkmIzM5O20gbmV3IHRv IHRoaXMgc3R1ZmYgOik8YnI+Cjxicj4KUmVnYXJkcyw8YnI+CldpbGxlbS48YnI+Cjxicj4KPGJy PgpPbiBNb24sIEF1ZyA2LCAyMDEyIGF0IDQ6MjAgUE0sIEplZmZyZXkgQmxhbmsgJmx0OzxhIGhy ZWY9Im1haWx0bzpibGFua0BlY2xpcHNlLm5jc2MubWlsIj5ibGFua0BlY2xpcHNlLm5jc2MubWls PC9hPiZndDsgd3JvdGU6PGJyPgomZ3Q7IFRoaXMgc2hvdWxkIGJlIHRoZSBzYW1lIHNlbWFudGlj YWxseSAoYXMgdGhlIGF1dGhvcml0YXRpdmUgdmVyc2lvbiBmcm9tPGJyPgomZ3Q7IDxhIGhyZWY9 Imh0dHA6Ly9pYXNlLmRpc2EubWlsIiB0YXJnZXQ9Il9ibGFuayI+aWFzZS5kaXNhLm1pbDwvYT4p IC0tIEkganVzdCByYW4gaXQgdGhyb3VnaCB4bWxsaW50IChvciB3YXMgaXQgdGlkeT8pIHRvPGJy PgomZ3Q7IG1ha2UgaXQgcmVhZGFibGUgaW4gYSB0ZXh0IGVkaXRvci4goChBbmQgeWVzLCBJIHNo b3VsZCBoYXZlIGRvY3VtZW50ZWQ8YnI+CiZndDsgdGhpcy4pPGJyPgomZ3Q7PGJyPgomZ3Q7IEkg cmVhbGx5IGNhbiYjMzk7dCByZW1lbWJlciB3aGljaCwgYnV0IGlmIHlvdSYjMzk7ZCBsaWtlIHRv IGRvIGEgcXVpY2sgcmUtcnVuIG9mPGJyPgomZ3Q7IGVhY2ggYW5kIGNvbXBhcmUsIGl0IHdvdWxk IGNlcnRhaW5seSBiZSBnb29kIGZvciB1cyB0byBkb2N1bWVudCBpdHM8YnI+CiZndDsgY29uZ3J1 ZW5jZSB3aXRoIHRoZSBvZmZpY2lhbCB2ZXJzaW9uIDopPGJyPgomZ3Q7PGJyPgomZ3Q7IChBbHNv IG5vdGUgdGhhdCB3ZSBhcmUgbm90IHRoZSBtYWludGFpbmVycyBvZiB0aGF0IGNvbnRlbnQgZm9y IFJIRUwgNS4pPGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7PGJyPgomZ3Q7IE9u IDA4LzA2LzIwMTIgMDM6MDAgQU0sIFdpbGxlbSBCb3Mgd3JvdGU6PGJyPgomZ3Q7Jmd0OyBIaSBB bGwsPGJyPgomZ3Q7Jmd0Ozxicj4KJmd0OyZndDsgVGhlIEdJVCByZXBvIGNvbnRhaW5zIHRoZSBm aWxlPGJyPgomZ3Q7Jmd0OyBSSEVMNi9yZWZlcmVuY2VzL2Rpc2Etc3RpZy1yaGVsNS12MXIwLjYt eGNjZGYtbWFudWFsLnhtbC4gVGhpcyBpcyBub3Q8YnI+CiZndDsmZ3Q7IHBhcnQgb2YgdGhlIHpp cGZpbGUgeW91IGNhbiBkb3dubG9hZCBmcm9tPGJyPgomZ3Q7Jmd0OyA8YSBocmVmPSJodHRwOi8v d2ViLm52ZC5uaXN0Lmdvdi92aWV3L25jcC9yZXBvc2l0b3J5L2NoZWNrbGlzdC9kb3dubG9hZD9p ZD0xMDU5IiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3dlYi5udmQubmlzdC5nb3Yvdmlldy9uY3Av cmVwb3NpdG9yeS9jaGVja2xpc3QvZG93bmxvYWQ/aWQ9MTA1OTwvYT4uPGJyPgomZ3Q7Jmd0Ozxi cj4KJmd0OyZndDsgSSBjb3VsZCBub3QgZmluZCBhIE1ha2VmaWxlIHRhcmdldCB0aGF0IGNyZWF0 ZXMgaXQuIFdoYXQgaXMgaXRzIG9yaWdpbj88YnI+CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0OyBSZWdh cmRzLDxicj4KJmd0OyZndDsgV2lsbGVtLjxicj4KJmd0OyZndDsgX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+CiZndDsmZ3Q7IHNjYXAtc2VjdXJpdHkt Z3VpZGUgbWFpbGluZyBsaXN0PGJyPgomZ3Q7Jmd0OyA8YSBocmVmPSJtYWlsdG86c2NhcC1zZWN1 cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQub3JnIj5zY2FwLXNlY3VyaXR5LWd1aWRlQGxp c3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgomZ3Q7Jmd0OyA8YSBocmVmPSJodHRwczovL2xp c3RzLmZlZG9yYWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1aWRl IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9saXN0cy5mZWRvcmFob3N0ZWQub3JnL21haWxtYW4v bGlzdGluZm8vc2NhcC1zZWN1cml0eS1ndWlkZTwvYT48YnI+CiZndDsgX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+CiZndDsgc2NhcC1zZWN1cml0eS1n dWlkZSBtYWlsaW5nIGxpc3Q8YnI+CiZndDsgPGEgaHJlZj0ibWFpbHRvOnNjYXAtc2VjdXJpdHkt Z3VpZGVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZyI+c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5m ZWRvcmFob3N0ZWQub3JnPC9hPjxicj4KJmd0OyA8YSBocmVmPSJodHRwczovL2xpc3RzLmZlZG9y YWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1aWRlIiB0YXJnZXQ9 Il9ibGFuayI+aHR0cHM6Ly9saXN0cy5mZWRvcmFob3N0ZWQub3JnL21haWxtYW4vbGlzdGluZm8v c2NhcC1zZWN1cml0eS1ndWlkZTwvYT48YnI+Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fPGJyPgpzY2FwLXNlY3VyaXR5LWd1aWRlIG1haWxpbmcgbGlzdDxi cj4KPGEgaHJlZj0ibWFpbHRvOnNjYXAtc2VjdXJpdHktZ3VpZGVAbGlzdHMuZmVkb3JhaG9zdGVk Lm9yZyI+c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4K PGEgaHJlZj0iaHR0cHM6Ly9saXN0cy5mZWRvcmFob3N0ZWQub3JnL21haWxtYW4vbGlzdGluZm8v c2NhcC1zZWN1cml0eS1ndWlkZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vbGlzdHMuZmVkb3Jh aG9zdGVkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjYXAtc2VjdXJpdHktZ3VpZGU8L2E+PGJyPgo8 L2Jsb2NrcXVvdGU+PC9kaXY+Cg== --===============3987194778409490392==--