On 04/17/2017 12:42 PM, bradt@signatureresearchinc.com wrote:
My name is Tim Bradt. I am software developer at Signature Research, Inc. I have been charged with getting SCAP up and running on some of our systems.
We are running Arch Linux. I was wondering what the process would be for porting the RHEL7 guide to Arch as we need the DISA STIG for system approval.
Hello Tim,
As others have mentioned already, the big job is to get an actual standard assembled for Arch Linux. Once that's done, writing SCAP content or other scripts is much more straightforward.
We've tried to tackle a translation of the RHEL 7 STIG into something that works for CentOS 7 and Ubuntu 16.04:
https://github.com/openstack/openstack-ansible-security
https://docs.openstack.org/developer/openstack-ansible-security/
(There's also a RHEL 6 STIG implementation for Ubuntu 14.04, but we're deprecating that now.)
Some of that work may help you figure out how to translate the RHEL 7 STIG requirements for Arch Linux. Feel free to reach out if you need pointers.