On 12/16/13, 4:07 PM, Eric Smith wrote:
> On 12/16/2013 04:00 PM, Kordell, Luke T wrote:
>> Hello,
>>
>> Is there a flag or setting that can be changed to include the
>> NIST 800-53 number on SCAP scan output or guide generation in-place
>> of the CCE number? I know the guides contain a reference to the NIST
>> 800-53 pdf file but it doesn't appear to list the control it satisfies.
They're included in the guide, e.g.:
http://people.redhat.com/swells/scap-security-guide/RHEL6/output/rhel6-gu...
Maps back to IA-5(1)(c), AU-10(5), etc.
> Hi Luke,
> I wrote a python script recently that can post process your results
> to include the NIST 800-53 security controls in addition to the CCE
> number. Let me know if you want I'll send you a copy of the script.
That'd be omgz awesome. Could you share with the list?
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide Here you go
Shawn, I doubt it's the most efficient code but it gets the
job done.