From shannon.mitchell at merlintechs.com Thu Aug 20 11:31:49 2015 Content-Type: multipart/mixed; boundary="===============7117710376200631255==" MIME-Version: 1.0 From: Shannon Mitchell To: scap-security-guide at lists.fedorahosted.org Subject: Re: disa-stig-rhel5-v1r0.6-xccdf-manual.xml Date: Tue, 07 Aug 2012 16:14:36 -0400 Message-ID: In-Reply-To: CAOa+pVhcSYdHrEP0gPvv+tgoP9_dQe4i9pEzD99GxTzZXweu1A@mail.gmail.com --===============7117710376200631255== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable I'm just guessing here, but it looks like the manual is meant to be the full thing. The oval language seems very limited on what it can do, so it only takes care of a small subset of the full set of checks. The bad thing is that it looks like the nessus scans that I have seen run against my systems check for all of them and not just the 350 in the benchmark. On Tue, Aug 7, 2012 at 4:03 PM, Willem Bos wrote: > Hi Shannon, > > Thanks. OK, so where do the extra id's come from? I grep-ed the whole > scap-security-guide directory on a id from the *-manual.xml file but - > apart from the file itself - got no results... > > Regards, > Willem. > > On Tue, Aug 7, 2012 at 9:20 PM, Shannon Mitchell > wrote: > > Every gen Id in the benchmark is in the manual. The manual contains all > 350 > > plus an extra 219. > > > > On Aug 7, 2012 1:41 PM, "Willem Bos" wrote: > >> > >> Hi Jeffrey, > >> > >> Are you sure disa-stig-rhel5-v1r0.6-xccdf-manual.xml is based on > >> disa-stig-rhel5-v1r0.6-xccdf.xml? > >> > >> The *-manual.xml file contains a lot more GEN* tags : > >> > >> grep -c 'GEN' U_RedHat_5_V1R0.6_STIG_Benchmark-xccdf.xml > >> 350 > >> > >> grep -c '<title>GEN' > >> scap-security-guide/RHEL6/references/disa-stig-rhel5-v1r0.6-xccdf.xml > >> 350 > >> > >> grep -c '<title>GEN' > >> > >> > scap-security-guide/RHEL6/references/disa-stig-rhel5-v1r0.6-xccdf-manual.= xml > >> 569 > >> > >> Maybe I'm missing something obvious but like I said, I'm new to this > stuff > >> :) > >> > >> Regards, > >> Willem. > >> > >> > >> On Mon, Aug 6, 2012 at 4:20 PM, Jeffrey Blank <blank(a)eclipse.ncsc.mi= l> > >> wrote: > >> > This should be the same semantically (as the authoritative version > from > >> > iase.disa.mil) -- I just ran it through xmllint (or was it tidy?) to > >> > make it readable in a text editor. (And yes, I should have document= ed > >> > this.) > >> > > >> > I really can't remember which, but if you'd like to do a quick re-run > of > >> > each and compare, it would certainly be good for us to document its > >> > congruence with the official version :) > >> > > >> > (Also note that we are not the maintainers of that content for RHEL > 5.) > >> > > >> > > >> > > >> > > >> > On 08/06/2012 03:00 AM, Willem Bos wrote: > >> >> Hi All, > >> >> > >> >> The GIT repo contains the file > >> >> RHEL6/references/disa-stig-rhel5-v1r0.6-xccdf-manual.xml. This is n= ot > >> >> part of the zipfile you can download from > >> >> > http://web.nvd.nist.gov/view/ncp/repository/checklist/download?id=3D1059. > >> >> > >> >> I could not find a Makefile target that creates it. What is its > origin? > >> >> > >> >> Regards, > >> >> Willem. > >> >> _______________________________________________ > >> >> scap-security-guide mailing list > >> >> scap-security-guide(a)lists.fedorahosted.org > >> >> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > >> > _______________________________________________ > >> > scap-security-guide mailing list > >> > scap-security-guide(a)lists.fedorahosted.org > >> > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > >> _______________________________________________ > >> scap-security-guide mailing list > >> scap-security-guide(a)lists.fedorahosted.org > >> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > > > > > > _______________________________________________ > > scap-security-guide mailing list > > scap-security-guide(a)lists.fedorahosted.org > > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > > > _______________________________________________ > scap-security-guide mailing list > scap-security-guide(a)lists.fedorahosted.org > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide > --===============7117710376200631255== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" SSYjMzk7bSBqdXN0IGd1ZXNzaW5nIGhlcmUsIGJ1dCBpdCBsb29rcyBsaWtlIHRoZSBtYW51YWwg aXMgbWVhbnQgdG8gYmUgdGhlIGZ1bGwgdGhpbmcuoCBUaGUgb3ZhbCBsYW5ndWFnZSBzZWVtcyB2 ZXJ5IGxpbWl0ZWQgb24gd2hhdCBpdCBjYW4gZG8sIHNvIGl0IG9ubHkgdGFrZXMgY2FyZSBvZiBh IHNtYWxsIHN1YnNldCBvZiB0aGUgZnVsbCBzZXQgb2YgY2hlY2tzLqAgVGhlIGJhZCB0aGluZyBp cyB0aGF0IGl0IGxvb2tzIGxpa2UgdGhlIG5lc3N1cyBzY2FucyB0aGF0IEkgaGF2ZSBzZWVuIHJ1 biBhZ2FpbnN0IG15IHN5c3RlbXMgY2hlY2sgZm9yIGFsbCBvZiB0aGVtIGFuZCBub3QganVzdCB0 aGUgMzUwIGluIHRoZSBiZW5jaG1hcmsuIDxicj4KPGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3Rl Ij5PbiBUdWUsIEF1ZyA3LCAyMDEyIGF0IDQ6MDMgUE0sIFdpbGxlbSBCb3MgPHNwYW4gZGlyPSJs dHIiPiZsdDs8YSBocmVmPSJtYWlsdG86d2hib3NAeHM0YWxsLm5sIiB0YXJnZXQ9Il9ibGFuayI+ d2hib3NAeHM0YWxsLm5sPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxicj48YmxvY2txdW90ZSBjbGFz cz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHgg I2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4KSGkgU2hhbm5vbiw8YnI+Cjxicj4KVGhhbmtz LiBPSywgc28gd2hlcmUgZG8gdGhlIGV4dHJhIGlkJiMzOTtzIGNvbWUgZnJvbT8gSSBncmVwLWVk IHRoZSB3aG9sZTxicj4Kc2NhcC1zZWN1cml0eS1ndWlkZSBkaXJlY3Rvcnkgb24gYSBpZCBmcm9t IHRoZSAqLW1hbnVhbC54bWwgZmlsZSBidXQgLTxicj4KYXBhcnQgZnJvbSB0aGUgZmlsZSBpdHNl bGYgLSBnb3Qgbm8gcmVzdWx0cy4uLjxicj4KPGJyPgpSZWdhcmRzLDxicj4KV2lsbGVtLjxicj4K PGRpdiBjbGFzcz0iSE9FblpiIj48ZGl2IGNsYXNzPSJoNSI+PGJyPgpPbiBUdWUsIEF1ZyA3LCAy MDEyIGF0IDk6MjAgUE0sIFNoYW5ub24gTWl0Y2hlbGw8YnI+CiZsdDs8YSBocmVmPSJtYWlsdG86 c2hhbm5vbi5taXRjaGVsbEBtZXJsaW50ZWNocy5jb20iPnNoYW5ub24ubWl0Y2hlbGxAbWVybGlu dGVjaHMuY29tPC9hPiZndDsgd3JvdGU6PGJyPgomZ3Q7IEV2ZXJ5IGdlbiBJZCBpbiB0aGUgYmVu Y2htYXJrIGlzIGluIHRoZSBtYW51YWwuIKBUaGUgbWFudWFsIGNvbnRhaW5zIGFsbCAzNTA8YnI+ CiZndDsgcGx1cyBhbiBleHRyYSAyMTkuPGJyPgomZ3Q7PGJyPgomZ3Q7IE9uIEF1ZyA3LCAyMDEy IDE6NDEgUE0sICZxdW90O1dpbGxlbSBCb3MmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzp3aGJv c0B4czRhbGwubmwiPndoYm9zQHhzNGFsbC5ubDwvYT4mZ3Q7IHdyb3RlOjxicj4KJmd0OyZndDs8 YnI+CiZndDsmZ3Q7IEhpIEplZmZyZXksPGJyPgomZ3Q7Jmd0Ozxicj4KJmd0OyZndDsgQXJlIHlv dSBzdXJlIGRpc2Etc3RpZy1yaGVsNS12MXIwLjYteGNjZGYtbWFudWFsLnhtbCBpcyBiYXNlZCBv bjxicj4KJmd0OyZndDsgZGlzYS1zdGlnLXJoZWw1LXYxcjAuNi14Y2NkZi54bWw/PGJyPgomZ3Q7 Jmd0Ozxicj4KJmd0OyZndDsgVGhlICotbWFudWFsLnhtbCBmaWxlIGNvbnRhaW5zIGEgbG90IG1v cmUgJmx0O3RpdGxlJmd0O0dFTiombHQ7L3RpdGxlJmd0OyB0YWdzIDo8YnI+CiZndDsmZ3Q7PGJy PgomZ3Q7Jmd0OyBncmVwIC1jICYjMzk7Jmx0O3RpdGxlJmd0O0dFTiYjMzk7IFVfUmVkSGF0XzVf VjFSMC42X1NUSUdfQmVuY2htYXJrLXhjY2RmLnhtbDxicj4KJmd0OyZndDsgMzUwPGJyPgomZ3Q7 Jmd0Ozxicj4KJmd0OyZndDsgZ3JlcCAtYyAmIzM5OyZsdDt0aXRsZSZndDtHRU4mIzM5Ozxicj4K Jmd0OyZndDsgc2NhcC1zZWN1cml0eS1ndWlkZS9SSEVMNi9yZWZlcmVuY2VzL2Rpc2Etc3RpZy1y aGVsNS12MXIwLjYteGNjZGYueG1sPGJyPgomZ3Q7Jmd0OyAzNTA8YnI+CiZndDsmZ3Q7PGJyPgom Z3Q7Jmd0OyBncmVwIC1jICYjMzk7Jmx0O3RpdGxlJmd0O0dFTiYjMzk7PGJyPgomZ3Q7Jmd0Ozxi cj4KJmd0OyZndDsgc2NhcC1zZWN1cml0eS1ndWlkZS9SSEVMNi9yZWZlcmVuY2VzL2Rpc2Etc3Rp Zy1yaGVsNS12MXIwLjYteGNjZGYtbWFudWFsLnhtbDxicj4KJmd0OyZndDsgNTY5PGJyPgomZ3Q7 Jmd0Ozxicj4KJmd0OyZndDsgTWF5YmUgSSYjMzk7bSBtaXNzaW5nIHNvbWV0aGluZyBvYnZpb3Vz IGJ1dCBsaWtlIEkgc2FpZCwgSSYjMzk7bSBuZXcgdG8gdGhpcyBzdHVmZjxicj4KJmd0OyZndDsg Oik8YnI+CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0OyBSZWdhcmRzLDxicj4KJmd0OyZndDsgV2lsbGVt Ljxicj4KJmd0OyZndDs8YnI+CiZndDsmZ3Q7PGJyPgomZ3Q7Jmd0OyBPbiBNb24sIEF1ZyA2LCAy MDEyIGF0IDQ6MjAgUE0sIEplZmZyZXkgQmxhbmsgJmx0OzxhIGhyZWY9Im1haWx0bzpibGFua0Bl Y2xpcHNlLm5jc2MubWlsIj5ibGFua0BlY2xpcHNlLm5jc2MubWlsPC9hPiZndDs8YnI+CiZndDsm Z3Q7IHdyb3RlOjxicj4KJmd0OyZndDsgJmd0OyBUaGlzIHNob3VsZCBiZSB0aGUgc2FtZSBzZW1h bnRpY2FsbHkgKGFzIHRoZSBhdXRob3JpdGF0aXZlIHZlcnNpb24gZnJvbTxicj4KJmd0OyZndDsg Jmd0OyA8YSBocmVmPSJodHRwOi8vaWFzZS5kaXNhLm1pbCIgdGFyZ2V0PSJfYmxhbmsiPmlhc2Uu ZGlzYS5taWw8L2E+KSAtLSBJIGp1c3QgcmFuIGl0IHRocm91Z2ggeG1sbGludCAob3Igd2FzIGl0 IHRpZHk/KSB0bzxicj4KJmd0OyZndDsgJmd0OyBtYWtlIGl0IHJlYWRhYmxlIGluIGEgdGV4dCBl ZGl0b3IuIKAoQW5kIHllcywgSSBzaG91bGQgaGF2ZSBkb2N1bWVudGVkPGJyPgomZ3Q7Jmd0OyAm Z3Q7IHRoaXMuKTxicj4KJmd0OyZndDsgJmd0Ozxicj4KJmd0OyZndDsgJmd0OyBJIHJlYWxseSBj YW4mIzM5O3QgcmVtZW1iZXIgd2hpY2gsIGJ1dCBpZiB5b3UmIzM5O2QgbGlrZSB0byBkbyBhIHF1 aWNrIHJlLXJ1biBvZjxicj4KJmd0OyZndDsgJmd0OyBlYWNoIGFuZCBjb21wYXJlLCBpdCB3b3Vs ZCBjZXJ0YWlubHkgYmUgZ29vZCBmb3IgdXMgdG8gZG9jdW1lbnQgaXRzPGJyPgomZ3Q7Jmd0OyAm Z3Q7IGNvbmdydWVuY2Ugd2l0aCB0aGUgb2ZmaWNpYWwgdmVyc2lvbiA6KTxicj4KJmd0OyZndDsg Jmd0Ozxicj4KJmd0OyZndDsgJmd0OyAoQWxzbyBub3RlIHRoYXQgd2UgYXJlIG5vdCB0aGUgbWFp bnRhaW5lcnMgb2YgdGhhdCBjb250ZW50IGZvciBSSEVMIDUuKTxicj4KJmd0OyZndDsgJmd0Ozxi cj4KJmd0OyZndDsgJmd0Ozxicj4KJmd0OyZndDsgJmd0Ozxicj4KJmd0OyZndDsgJmd0Ozxicj4K Jmd0OyZndDsgJmd0OyBPbiAwOC8wNi8yMDEyIDAzOjAwIEFNLCBXaWxsZW0gQm9zIHdyb3RlOjxi cj4KJmd0OyZndDsgJmd0OyZndDsgSGkgQWxsLDxicj4KJmd0OyZndDsgJmd0OyZndDs8YnI+CiZn dDsmZ3Q7ICZndDsmZ3Q7IFRoZSBHSVQgcmVwbyBjb250YWlucyB0aGUgZmlsZTxicj4KJmd0OyZn dDsgJmd0OyZndDsgUkhFTDYvcmVmZXJlbmNlcy9kaXNhLXN0aWctcmhlbDUtdjFyMC42LXhjY2Rm LW1hbnVhbC54bWwuIFRoaXMgaXMgbm90PGJyPgomZ3Q7Jmd0OyAmZ3Q7Jmd0OyBwYXJ0IG9mIHRo ZSB6aXBmaWxlIHlvdSBjYW4gZG93bmxvYWQgZnJvbTxicj4KJmd0OyZndDsgJmd0OyZndDsgPGEg aHJlZj0iaHR0cDovL3dlYi5udmQubmlzdC5nb3Yvdmlldy9uY3AvcmVwb3NpdG9yeS9jaGVja2xp c3QvZG93bmxvYWQ/aWQ9MTA1OSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly93ZWIubnZkLm5pc3Qu Z292L3ZpZXcvbmNwL3JlcG9zaXRvcnkvY2hlY2tsaXN0L2Rvd25sb2FkP2lkPTEwNTk8L2E+Ljxi cj4KJmd0OyZndDsgJmd0OyZndDs8YnI+CiZndDsmZ3Q7ICZndDsmZ3Q7IEkgY291bGQgbm90IGZp bmQgYSBNYWtlZmlsZSB0YXJnZXQgdGhhdCBjcmVhdGVzIGl0LiBXaGF0IGlzIGl0cyBvcmlnaW4/ PGJyPgomZ3Q7Jmd0OyAmZ3Q7Jmd0Ozxicj4KJmd0OyZndDsgJmd0OyZndDsgUmVnYXJkcyw8YnI+ CiZndDsmZ3Q7ICZndDsmZ3Q7IFdpbGxlbS48YnI+CiZndDsmZ3Q7ICZndDsmZ3Q7IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPgomZ3Q7Jmd0OyAmZ3Q7 Jmd0OyBzY2FwLXNlY3VyaXR5LWd1aWRlIG1haWxpbmcgbGlzdDxicj4KJmd0OyZndDsgJmd0OyZn dDsgPGEgaHJlZj0ibWFpbHRvOnNjYXAtc2VjdXJpdHktZ3VpZGVAbGlzdHMuZmVkb3JhaG9zdGVk Lm9yZyI+c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQub3JnPC9hPjxicj4K Jmd0OyZndDsgJmd0OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly9saXN0cy5mZWRvcmFob3N0ZWQub3Jn L21haWxtYW4vbGlzdGluZm8vc2NhcC1zZWN1cml0eS1ndWlkZSIgdGFyZ2V0PSJfYmxhbmsiPmh0 dHBzOi8vbGlzdHMuZmVkb3JhaG9zdGVkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjYXAtc2VjdXJp dHktZ3VpZGU8L2E+PGJyPgomZ3Q7Jmd0OyAmZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyPgomZ3Q7Jmd0OyAmZ3Q7IHNjYXAtc2VjdXJpdHktZ3Vp ZGUgbWFpbGluZyBsaXN0PGJyPgomZ3Q7Jmd0OyAmZ3Q7IDxhIGhyZWY9Im1haWx0bzpzY2FwLXNl Y3VyaXR5LWd1aWRlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPnNjYXAtc2VjdXJpdHktZ3VpZGVA bGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwvYT48YnI+CiZndDsmZ3Q7ICZndDsgPGEgaHJlZj0iaHR0 cHM6Ly9saXN0cy5mZWRvcmFob3N0ZWQub3JnL21haWxtYW4vbGlzdGluZm8vc2NhcC1zZWN1cml0 eS1ndWlkZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vbGlzdHMuZmVkb3JhaG9zdGVkLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3NjYXAtc2VjdXJpdHktZ3VpZGU8L2E+PGJyPgomZ3Q7Jmd0OyBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4KJmd0OyZndDsg c2NhcC1zZWN1cml0eS1ndWlkZSBtYWlsaW5nIGxpc3Q8YnI+CiZndDsmZ3Q7IDxhIGhyZWY9Im1h aWx0bzpzY2FwLXNlY3VyaXR5LWd1aWRlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmciPnNjYXAtc2Vj dXJpdHktZ3VpZGVAbGlzdHMuZmVkb3JhaG9zdGVkLm9yZzwvYT48YnI+CiZndDsmZ3Q7IDxhIGhy ZWY9Imh0dHBzOi8vbGlzdHMuZmVkb3JhaG9zdGVkLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NjYXAt c2VjdXJpdHktZ3VpZGUiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2xpc3RzLmZlZG9yYWhvc3Rl ZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1aWRlPC9hPjxicj4KJmd0Ozxi cj4KJmd0Ozxicj4KJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXzxicj4KJmd0OyBzY2FwLXNlY3VyaXR5LWd1aWRlIG1haWxpbmcgbGlzdDxicj4KJmd0 OyA8YSBocmVmPSJtYWlsdG86c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQu b3JnIj5zY2FwLXNlY3VyaXR5LWd1aWRlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgom Z3Q7IDxhIGhyZWY9Imh0dHBzOi8vbGlzdHMuZmVkb3JhaG9zdGVkLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3NjYXAtc2VjdXJpdHktZ3VpZGUiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2xpc3RzLmZl ZG9yYWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1aWRlPC9hPjxi cj4KJmd0Ozxicj4KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X188YnI+CnNjYXAtc2VjdXJpdHktZ3VpZGUgbWFpbGluZyBsaXN0PGJyPgo8YSBocmVmPSJtYWls dG86c2NhcC1zZWN1cml0eS1ndWlkZUBsaXN0cy5mZWRvcmFob3N0ZWQub3JnIj5zY2FwLXNlY3Vy aXR5LWd1aWRlQGxpc3RzLmZlZG9yYWhvc3RlZC5vcmc8L2E+PGJyPgo8YSBocmVmPSJodHRwczov L2xpc3RzLmZlZG9yYWhvc3RlZC5vcmcvbWFpbG1hbi9saXN0aW5mby9zY2FwLXNlY3VyaXR5LWd1 aWRlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9saXN0cy5mZWRvcmFob3N0ZWQub3JnL21haWxt YW4vbGlzdGluZm8vc2NhcC1zZWN1cml0eS1ndWlkZTwvYT48YnI+CjwvZGl2PjwvZGl2PjwvYmxv Y2txdW90ZT48L2Rpdj48YnI+Cg== --===============7117710376200631255==--