This was a script I created to facilitate in updating STIG references
within SCAP content.

It was intended to address the challenge of keeping the SCAP content in
alignment with current STIG content.

In general, the script parses through each STIG requirement in the STIG
overlay file, finds the associated rule id, then updates the STIG
overlay file and the rule id references with the following data from the
STIG:

- Requirement Title
- CCI
- CCE
- Severity
- SVKey
- VRelease
- IA Controls

This helps reduce allot of the administrative overhead so that more
focus can be directed to the actual content.

On Wed, 2016-02-17 at 14:14 +0000, Mike Kuhnkey wrote:
> Has someone checked out the script in DISA's STIG Release? ->U_Red_Hat_Enterprise_Linux_7_V1R0-1_Manual_STIG/Test/stig_refs.sh
> I find the instructions alarming on how to use the script.
> It is to be placed in the RHEL 5 folder (scap-security-guide project) and run.....
> ....am I off in left field here?
> What happens during make rhel7-dist -> content?
> Is this where/how the DRAFT was created?
> --
> SCAP Security Guide mailing list
> scap-security-guide@lists.fedorahosted.org
> https://lists.fedorahosted.org/admin/lists/scap-security-guide@lists.fedorahosted.org
> https://github.com/OpenSCAP/scap-security-guide/
>

--


Best regards,

Trey Henefield, CISSP
Senior IAVA Engineer

Ultra Electronics
Advanced Tactical Systems, Inc.
4101 Smith School Road
Building IV, Suite 100
Austin, TX 78744 USA

Trey.Henefield@ultra-ats.com
Tel: +1 512 327 6795 ext. 647
Fax: +1 512 327 8043
Mobile: +1 512 541 6450

www.ultra-ats.com


Disclaimer
The information contained in this communication from
trey.henefield@ultra-ats.com sent at 2016-02-17 10:06:11 is private and may be legally privileged or export controlled. It is intended solely for use by scap-security-guide@lists.fedorahosted.org and others authorized to receive it. If you are not scap-security-guide@lists.fedorahosted.org you are hereby notified that any disclosure, copying, distribution or taking action in reliance of the contents of this information is strictly prohibited and may be unlawful.