On 4/3/13 11:47 AM, Kurt Seifried wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/03/2013 07:24 AM, Nunez, Luis K wrote:
> >Hi Chad, I've not seen any further dialog specific to the topic.
> >Remediation has the tendency to scare people off :(
> >
> >I'll check with the moderator of the remediation-dev list on you
> >request to join.
> >
> >Thanks.
> >
> >-ln
This is something I have to deal with as well, would it be possible to
add me to the list? thanks.
So, to clarify.... since I received a few "wtf is
this?" emails off-list...
remediation-dev@nist is about developing remediation /standards/, such
as CREs. People can signup here:
http://scap.nist.gov/community.html
open-scap-list@redhat is about developing the OpenSCAP tool, of which:
- homepage @
http://open-scap.org/
- mailing list @
https://www.redhat.com/mailman/listinfo/open-scap-list
SCAP Security Guide is where protocols, tooling, and content come
together to produce usable content such as the existing prose guides and
STIG content. There's certainly overlaping interests and common problems
shared between these focus areas, and cross-posting when needed is
totally cool (we need to communicate!), however remediation-dev@nist
isn't where we'll be figuring out remediation scripts for SSG ;)