On 7/26/17 1:48 PM, Ted Brunell wrote:
I want to clarify something that was mentioned about automation
content earlier in this thread...
I communicate on a regular basis with the people at DISA that are
responsible for STIG and SCAP content. They have verified that DISA
is planning on releasing automation content (aka benchmark) containing
the necessary files for RHEL 7 in the not too distant future. I am
not sure exactly when it will be released, but when it is, it will be
posted for consumption at
http://iase.disa.mil/stigs/scap/Pages/index.aspx under SCAP 1.2 content.
Currently, they are reviewing the SSG content for use in the benchmark
content.
Nice! Thanks Ted! Great to hear they've changed their minds. Would be
*fantastic* to bring DISA back into the fold of what DoD, NIST, NSA, the
community, and Red Hat are doing on STIG work!
How goes the work with DISA to align their content to the DoD
recommended settings?