I've been using the SCAP Security Guide for the past two
years to manage the lock down and deployment of EL7 machines in
our lab and one of the best features I've seen is the move from
a single "STIG for Red Hat Enterprise Linux" profile targeting
servers to three separate profiles for Server, Server with GUI,
and Workstation. I just used the EL7 STIG Workstation profile
this week with the SSG in the EL7 repos. It's extremely useful
to me since all of our machines are used as workstations, not
servers, so to have a profile that works out of the box without
needing to do excessive customization, and in turn,
justification of said customizations is very handy.
So imagine my surprise and dismay when I used the most recent
release from the Copr repo and discovered that my convenient
separate profiles were now all gone to align with the recently
released singular DISA server profile. Are there any plans with
the various contributors involved (RH, DoD, others, etc.) to
re-work the server STIG profile again to have a separate
upstream-supported STIG profile for Workstation usage? Having it
in previous releases has proven to be an extremely useful feature
and I would hate to see it regress back to "Linux is just for
servers".