They are using the prose guides. Looking at the CTP tables for the the
RHEL6 stig, the language for default values may also need to be stronger or
reworded as well.
On Tue, Aug 5, 2014 at 4:55 PM, Shawn Wells <shawn(a)redhat.com> wrote:
On 8/5/14, 6:54 PM, Shawn Wells wrote:
>
> On 8/5/14, 2:57 PM, Gabe Alford wrote:
>
>> Elaborating the rule descriptions to reenforce default behaviors would
>> be very beneficial at my sites at least. The manual checks are being failed
>> by the IV&E-type staff if disabled settings are not explicitly configured
>> as they either don't understand that the default configuration settings are
>> disabled or they really like having the explicit configuration settings.
>>
>
> How is the guide being used? Are they reading through the prose guide
> (rhel6-guide.html), or using one of the CTP tables (e.g.
> table-rhel6-stig.html)?
>
Part of the reason for the question: the prose guides contain *all* rules,
whereas the tables reflect only a single profile.
--
SCAP Security Guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/