I would like to propose a new Github issue template which should make requesting a new SCAP rule easier. It should guide the issue reporter and answer questions which are important for content authors right away. Here is the list of questions I would like to have in the template. Please feel free to give any feedback, ideally until Monday November 16.

~~~

##Which products does the rule apply to?

##Describe the configuration setting enforced by this rule.

##Why is the configuration security relevant?

##How to check the configuration?

###Is it order dependent? (does it need to be at certain place in the file?

###What is correct and incorrect syntax?

##How to remediate

###Does any command need to be run?

##Are there going to be other rules like (similar configuration) this in the future? (is it worth creating template?)

##Are there any caveats to be considered when testing?

##Is the configuration loaded directly by the <software> or is it stored in some intermediate database (similar to dconf)? (We want to edit the lowest level possible, if appropriate)

##Is it possible to check / remediate this configuration in offline mode? (scanning containers or offline systems)

## Please provide security policy references if possible e.g. STIG

~~~

Have a nice weekend,