Actually it is more than that. RHEL certifications including profiles that
go through certification do not apply to CentOS and actually do not flow
down from RHEL to CentOS.
CentOS fails to meet certification requirements in the areas of
cryptography and now in secure software supply chain which both OSPP and
CUI have and will have requirements for.
The Scientific Linux project is (unfortunately) no longer moving forward
SL7 will be the last major release.
On Sat, Aug 3, 2019 at 4:59 AM Tim Burress <taj(a)fedoraproject.org> wrote:
Thanks for that! I can't help wondering if people have
considered
separating CentOS and SL so that they can be treated individually without a
lot of workarounds? Given that the rules and the checks are already
centralized in linux_os (I think), it seems like there wouldn't be too much
duplication, though I the nice thing about the derivatives is that a change
in RHEL automatically gets propagated to the derivatives.
Alternatively, I wonder why it was decided to remove profiles like OSPP
from CentOS? Of course, no CentOS system could meet all of those criteria
(like the need for commercial support), but it seems like that's a user
decision, and it's much easier to de-select one rule than to hack the logic
that pulls profiles out.
Just some early morning thoughts, though!
Tim
_______________________________________________
scap-security-guide mailing list --
scap-security-guide(a)lists.fedorahosted.org
To unsubscribe send an email to
scap-security-guide-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fe...