Still in development – I can follow up with Red Hat

 

From: scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap-security-guide-bounces@lists.fedorahosted.org] On Behalf Of Lesley Kimmel
Sent: Thursday, April 23, 2015 1:47 PM
To: scap-security-guide@lists.fedorahosted.org
Subject: EXTERNAL: RHEL7 Content Status

 

All;

I'm checking in on the status of the RHEL7 SCAP content. Also, I was hoping someone could explain to me the plan for SCAP content on RHEL7. I ask because I was going over the RHEL7 Security Guide today (https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/pdf/Security_Guide/Red_Hat_Enterprise_Linux-7-Security_Guide-en-US.pdf) and it states in section 6.1: 'Note that Red Hat does not provide any default compliance policy along with the Red Hat Enterprise Linux 7 distribution. The reasons for that are explained in section 6.2 "Defining compliance policy."'

I don't really see any direct explanation of the above note, and it makes me wonder if the plan is really to include this content at some point or not. RHEL7 does include the 'scap-security-guide' package but last I checked it was missing a lot of "meat" as compared to the RHEL6 'scap-security-guide' content.

Thanks ahead of time,
Les Kimmel

o

t

e

t

h

a

t

R

e

d

H

a

t

d

o

e

s

n

o

t

p

r

o

v

i

d

e

a

n

y

d

e

f

a

u

l

t

c

o

m

p

l

i

a

n

c

e

p

o

l

i

c

y

a

l

o

n

g

w

i

t

h

t

h

e

R

e

d

H

a

t

E

n

t

e

r

p

r

i

s

e

L

i

n

u

x

7

d

i

s

t

r

i

b

u

t

i

o

n

.

T

h

e

r

e

a

s

o

n

s

f

o

r

t

h

a

t

a

r

e

e

x

p

l

a

i

n

e

d

i

n

S

e

c

t

i

o

n

6

.

2

,

D

e

f

i

n

i

n

g

C

o

m

p

l

i

a

n

c

e

P

o

l

i

c

y

."Note