Okay, this is just cool. The one change I'd like to see, if you think it's useful, is to sort on severity. When I was writing RHEL 6 Aqueduct scripts I tried to focus on the Highs and Mediums. However, it is easy to miss one here and there.



On Mon, May 19, 2014 at 3:44 PM, Greg Elin <> wrote:
I've put together a web page to show which RHEL 6 CCE's have a remediation script from Aqueduct and SSG.

It is interesting that a number of rules are missing CCE Idents. It is also easier to see the coverage of fix scripts.


Would love feedback and thoughts in how to improve coverage.

Greg Elin
P: 917-304-3488

scap-security-guide mailing list

Mind on a Mission