Hello Jeff,
thank you for reaching out.
----- Original Message -----
From: "Jeffrey Hawkins" <rtswguru(a)hotmail.com>
To: "SCAP Security Guide" <scap-security-guide(a)lists.fedorahosted.org>,
open-scap-list(a)redhat.com
Sent: Wednesday, October 7, 2015 7:50:31 PM
Subject: Re: [Open-scap] Insight into release timing of RHEL7 STIG
as "official" -- any help needed on the Project?
Thank you for your feedback...
Any particular areas where focus needs to be applied first for STIG, or just
jump in ... :)?
The list of tickets / issues related with the effort of STIG profile availability for the
Red Hat Enterprise Linux 7 project is tracked here:
[1]
https://github.com/OpenSCAP/scap-security-guide/milestones/RHEL7%20NIAP/U...
Feel free to start looking into some of those.
Should you have additional questions (e.g. not being familiar what's
expected to be done with those), don't hesitate to ask.
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
Jeff
________________________________________
From: scap-security-guide-bounces(a)lists.fedorahosted.org
<scap-security-guide-bounces(a)lists.fedorahosted.org> on behalf of Šimon
Lukašík <isimluk(a)fedoraproject.org>
Sent: Wednesday, September 30, 2015 12:01 PM
To: SCAP Security Guide; open-scap-list(a)redhat.com
Subject: Re: Insight into release timing of RHEL7 STIG as "official" -- any
help needed on the Project?
On 09/29/2015 05:49 PM, Jeffrey Hawkins wrote:
> Anyone have any insight on when the RHEL7 STIG is going to be ready for
> prime time to be picked up by DISA? I work for a company the delivers
> RHEL based Products that use the STIG as part of the Security Standards
> /Benchmark to follow, and right now we are middle of development cycle
> of migrating our Products from RHEL6 to RHEL7. We are leveraging
> existing RHEL6 STIG, and the early RHEL7 drafts where it make sense
> within our own Hardening Framework (developed and carried forward from
> pre-RHEL4 days). We would like to avoid what we faced with RHEL6 with
> chasing the Draft verses RHEL5 STIG, and speculating what would be in
> the final . So, thought I would raise a query of the Benchmark rollout...
>
>
> Are there areas where help is needed as I/we would be more than happy to
> help the Project?
>
Hello Jeff,
It is work in progress. All the development is taking place in
https://github.com/OpenSCAP/scap-security-guide/tree/master/RHEL/7
So far, the focus was on PCI-DSS. We understood PCI-DSS as a sub-set of
STIG (not precise, but close). PCI-DSS is close to be finished. So, the
focus will shift towards STIG upstream work.
We are more then welcome to any contribution!
Thanks!
--
Šimon Lukašík
Senior Software Engineer
Team Lead, Security Compliance, Red Hat, Inc.
--
SCAP Security Guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/
_______________________________________________
Open-scap-list mailing list
Open-scap-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list