On Fri, Mar 20, 2015 at 10:56 AM, Shawn Wells <shawn@redhat.com> wrote:


On 3/20/15 9:23 AM, Gabe Alford wrote:
> Depends on how agnostic the content is.

It would just be primarily for the RHEL/Fedora products and derivatives i.e CentOS, etc.

Makes sense to drop into existing directories. Definitely looking forward to the patches!

So.... I keep going over this back and forth in my head, as the BIND and HTTP would follow the Application and Web Server SRGs and not the OS SRG, does it make sense to put the STIGs in the OS derivative directories, i.e. RHEL/6,or somewhere else like maybe RHEL/apps and RHEL/webservers? Of course if a person is using RHEL, it would be reasonable to assume that that individual is using the HTTP and BIND versions officially supported with the OS version, so maybe it does make sense to go under RHEL/6 for example?

Gabe