It's not well documented =/stig_overlay.sh of rhel6 appears to be same for rhel7. When completed what will rhel7 stig_overlay look like when rhel6 references are replaced? Should I be talking with DISA FSO or have I missed something in the Wiki or blogs?
<overlay owner="disastig" ruleid="partition_for_var_log_audit" ownerid="RHEL-06-000004" disa="137" severity="low">This will take the partition_for_var_log_audit rule and embed RHEL-06-000004 into its metadata.
<VMSinfo VKey="38467" SVKey="50267" VRelease="1" />
<title>The system must use a separate file system for the system audit data path.</title>
</overlay>
You're not crazy. The SRG system is broken and going away. Until SRG dies, the system goes something like this:DISA RHEL-7 Draft STIG references to "SRG-OS-000001-GPOS-00001" are new to me...Is this a new form of unified references? Somehow cross-referenced to "CCI"? I need some guidance here, or is it still being sorted out? I really don't know how to phrase this question intelligently....can someone help me out?
Title Set Password Strength Minimum Special Characters
Rule accounts_password_pam_ocredit
Ident CCE-26409-3
Ident DISA FSO RHEL-06-000058
Result pass