They are using the prose guides. Looking at the CTP tables for the the RHEL6 stig, the language for default values may also need to be stronger or reworded as well.


On Tue, Aug 5, 2014 at 4:55 PM, Shawn Wells <shawn@redhat.com> wrote:

On 8/5/14, 6:54 PM, Shawn Wells wrote:

On 8/5/14, 2:57 PM, Gabe Alford wrote:
Elaborating the rule descriptions to reenforce default behaviors would be very beneficial at my sites at least. The manual checks are being failed by the IV&E-type staff if disabled settings are not explicitly configured as they either don't understand that the default configuration settings are disabled or they really like having the explicit configuration settings.

How is the guide being used? Are they reading through the prose guide (rhel6-guide.html), or using one of the CTP tables (e.g. table-rhel6-stig.html)?

Part of the reason for the question: the prose guides contain *all* rules, whereas the tables reflect only a single profile.