On 7/25/14, 10:29 PM, Kayse, Josh wrote:
On Jul 24, 2014, at 1:06 PM, JENNINGS, JARED L CTR USAF AFMC 96
SK/CCI<jared.jennings.ctr(a)us.af.mil> wrote:
> >These are David Smith's changes emailed to the scap-security-guide list on
Thu
> >Jul 17 18:21:29 UTC 2014, but applied to the RHEL/7 directory. Also I found a
> >typo and fixed it both in RHEL/6 and RHEL/7.
> >
> >I'm attempting to send these patches using Outlook. This may fail.
> >
> >Jared Jennings (4):
> > correct punctuation error in NIST SP800-53 reference
> > updated transforms to reflect 800-53 rev4
> > updated 800-53 control references (services)
> > updated 800-53 control references (system)
> >
> >RHEL/6/input/system/auditing.xml | 2 +-
> >RHEL/7/input/services/base.xml | 18 ++++----
> >RHEL/7/input/services/obsolete.xml | 28 +++++++-------
> >RHEL/7/input/services/ssh.xml | 4 +-
> >RHEL/7/input/system/auditing.xml | 58 ++++++++++++++--------------
> >RHEL/7/input/system/network/ipsec.xml | 2 +-
> >RHEL/7/input/system/network/kernel.xml | 2 +-
> >RHEL/7/input/system/network/wireless.xml | 8 ++--
> >RHEL/7/input/system/software/integrity.xml | 12 +++---
> >RHEL/7/transforms/constants.xslt | 2 +-
> >RHEL/7/transforms/xccdf2html.xslt | 4 +-
> >11 files changed, 70 insertions(+), 70 deletions(-)
> >
> >--
> >SCAP Security Guide mailing list
> >scap-security-guide(a)lists.fedorahosted.org
> >https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> >https://github.com/OpenSCAP/scap-security-guide/
Any recommendations on maintaining the previous control mappings? My organization is
stuck using a policy based on NIST 800-53 Rev 3.
Right now the name-pair is nist="xxx".... we could change to something
like 80053v3="xxx", 80053v4="xxx" if there is enough interest (read:
someone cares enough to code the old references back in)