Yes, but please hold off on remediation content until the OVAL validates per the schematron, and there is a means of handling parameters/variables in fix content.  If you don't eat your meat, you can't have any pudding.  But we should be able to have both.

Subscribers will note that while they got their STIG, there is no automated checking content for it.  But it is very close. 

Please see the output from "make validate" for schematron validation problems.

Also, how many have run the automated scans per:

Do the OVAL checks which are executed here work?  Would you like to see these in an automated STIG, as-is?  Or would some QA first be nice?

On Sat, Jun 1, 2013 at 6:14 PM, Brian Millett <> wrote:
On Sat, 1 Jun 2013 17:20:12 -0400
Shawn Wells <> wrote:


Well, for me ACK.

The hardest part of maintaining a bunch of remediation scrips is to make sure
that the "fix" is consistant with the "check".  I've spent much time
remediating my remediation.

I like it.

Brian Millett
"Orin Zento has powerful friends. By embarrassing him, you embarrassed
    them. Today, you have made new enemies. If I were you, Commander, I
    would watch things very carefully. You are not the most popular person
    in government circles right now."
'So what else is new?'
   -- [ Senator Hidoshi and Sinclair, "By Any Means Necessary"]
scap-security-guide mailing list