On 7/23/14, 12:54 PM, leam hall wrote:
The actual RHEL 7 STIG, if it follows RHEL 6 timelines, will be out
right before RHEL 8.
Hey hey now... ;)
I'm just returning from PTO, and will be presenting at the 30-JULY
Defense in Depth event (http://defenseindepth2014.org)..
. so there's a
bit of a hard deadline on establishing some sort of RHEL7 STIG schedule.
To some degree you can use RHEL 5 and 6 as guidelines but they are
more official than a blind guess.
DISA FSO sent over the underlying (and recently updated) OS SRG
requirements that RHEL 7 must meet:
There's significant overlap between these and the underlying RHEL6 STIG
requirements, though we haven't sorted through them all yet. Many seem
to not be applicable. It'll give interested parties a starting point though.