Hi Shawn,
Wow, so this whole thread really took on a life of it's own, far outside
the scope of my original intent. So to try to bring it back...
The profile split started when ...
Thanks for the background info, it helps to understand why things are the
way they are.
If having DISA release updated content is important to you ...
Not specifically, that just makes it easier since the auditors know the
DISA STIG and that what they ask about. So long as I have a good profile
with sound security practices that I can justify to my ODAA auditor then
I'm satisfied. The OSPP profile should fit that purpose well and if I
explain it to auditors, I'm 70-80% confident I can get them on board with
it.
My main point was that having distinctly separate Workstation and Server
profiles was very helpful, so I was a bit worried when they went away. If
I understand you correctly, the OSPP / USGCB profile for EL7 is
out-of-the-box intended for a desktop configuration? Aside from removing
X, is there any difference between the OSPP profile and where a "server"
profile would start from? Obviously, you'd want to go through and enable
the services that the server is to host and their respective
configurations. Is that all or are there other core settings that should
change?
----------
Chuck Atkins
Staff R&D Engineer, Scientific Computing
Kitware, Inc.
On Fri, Jul 21, 2017 at 11:35 AM, Shawn Wells <shawn(a)redhat.com> wrote:
The profile split started when
On 7/21/17 10:18 AM, Meinecke, Lee wrote: