Thanks all! Very helpful.
Gabe
On Thu, Oct 30, 2014 at 7:57 PM, Shawn Wells <shawn(a)redhat.com> wrote:
On 10/29/14, 4:50 PM, Gabe Alford wrote:
>
> I wanted to ask if anyone is using RHEV at all especially in
> an IC/DoD environment. Has it been approved? Secured? What issues are
> there?
RHEV 3x has been dropped into a few JWICS environments. Formally on a
few IC approved product baselines (I worked on a few of them). IIRC
it's on Army's baseline too.... but I shouldn't be quoted on that (can
check with those who are authoritative, if useful).
The Virtual Machine Manager STIG is still in draft:
Website:
http://iase.disa.mil/stigs/srgs/Pages/index.aspx
Direct Link:
http://iasecontent.disa.mil/stigs/zip/u_draft_vmm_srg_v1r01.zip
Once it's polished up, you'll likely see progress on a formal RHEV STIG
(we need it for RHEV Manager).
--
SCAP Security Guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/