Le 04/10/2016 à 16:26, Gabe Alford a écrit :
Hello,
Both the DISA SRGs and STIGIDs are added to the applicable RHEL/7 content.
You can verify this by either `grep -rni 'stigid\|srg'
RHEL/7/input/xccdf`, or `grep 'SRG\|RHEL-07' ssg-rhel7-xccdf.xml`
Also, when a report is generated with the oscap --report option, the SRG
and STIGID identifiers can be viewed in the report.
Gabe
Hello Gabe,
Thanks for your answer. So I tried to write a little script which takes
the XCCDF file downloaded from DISA site and try to find the matching
rules into the RHEL/7/input/xccdf/*.xml files.
For now, I justed focused on the stigid identifiers not on the SGR ones.
Actually the result is that I have 97 rules matching with the DISA XCCDF
upstream file ?
Do you think it is a relevant number ?
Browsing the OPENSCAP XCCDF files I realised that there were some DISA
rules that maybe already covered but there is not actually a stigid
attributed attached to these rules.
Do you think it can be relevant if I try to complete OPENSCAP XCCDF
files with missing stigid if matches can be found against the DISA XCCDF
upstream file ? Or is it definitely not the process ?
Thanks for your answer.
Regards,
Olivier Bonhomme