On 07/01/2014 05:36 PM, Shaw, Ray V CTR USARMY ARL (US) wrote:
Classification: UNCLASSIFIED
Caveats: NONE
Hope I'm not being a bother, but if possible, would someone mind weighing in
on this? Scanning on RHEL7 isn't particularly useful right now, and we'd
like to lock it down as soon as possible.
Thanks,
Hello Ray,
Thank You for checking with us.
RHEL6 part of content is well mature and next natural step is to enhance
RHEL7 part. So it is near on the road maps. However, I unable to comment
further.
The RHEL6 content could be created by just copying RHEL6 over. However,
it was decided that we want to put more diligence into creating RHEL7
content.
That being said, SCAP Security Guide is open source project and if you
or your organization feels that more thorough STIG guidance is needed.
You are very welcomed to contribute!
The other option is to file a customer ticket with your software
provider to indicate that SCAP content is essential deliverable for you.
Best regards,
--
Simon Lukasik
Security Technologies