Shawn (and all the rest),
The best thing to do is open tickets with DISA FSO by sending emails to
disa.letterkenny.FSO.mbx.stig-customer-support-mailbox(a)mail.mil when (not if) you find
errors in the DISA STIG. One aspect to consider is that FSO adapted a number of SSG
requirements to map more closely to the Operating System Security Requirements Guide (OS
SRG) one of the basis documents for the RHEL6 SSG content, so some discrepancies between
the STIG and SSG content may actually point to problems in the SSG content.
One additional point I neglected to make in my last email is that the next RHEL6 STIG need
not be published as part of an FSO Quarterly Release. When the SSG OVAL has been
integrated into the STIG sufficiently, we expect to publish an updated Manual STIG and
automated SCAP Benchmark out of cycle. As synchronization processes develop between the
STIG and SSG content in the future, we expect the RHEL6 STIG will merge into the Quarterly
Release cycle.
Finally, all comments made by me on this list are my personal opinion and do not
necessarily reflect the positions of DISA, DISA FSO, HP, or tapestry technologies.
Thanks,
Leland
--
Leland Steinke, Security+
DISA FSO Technical Support Contractor
tapestry technologies, Inc
717-267-5797 (DSN 570)
leland.j.steinke.ctr(a)mail.mil (gov't)
lsteinke(a)tapestrytech.com (com'l)
-----Original Message-----
From: scap-security-guide-bounces(a)lists.fedorahosted.org [mailto:scap-
security-guide-bounces(a)lists.fedorahosted.org] On Behalf Of Shawn Wells
Sent: Thursday, July 18, 2013 10:29 AM
To: scap-security-guide(a)lists.fedorahosted.org
Subject: Re: Roadmap for next official DISA RHEL6 STIG release?
On Jul 18, 2013, at 9:27 AM, "Steinke, Leland J CTR DISA FSO (US)"
<leland.j.steinke.ctr(a)mail.mil> wrote:
> Updates to the RHEL6 STIG will not be included in the July 2013
release. We're still working on processes to integrate DISA's version
of the STIG with the SSG content.
Yikes! Is there anything we (the SSG) community can do to help, or is
the delay for other reasons (e.g. Internal process, etc)?
>
>
> Regards,
> --
> Leland Steinke, Security+
> DISA FSO Technical Support Contractor
> tapestry technologies, Inc
> 717-267-5797 (DSN 570)
> leland.j.steinke.ctr(a)mail.mil (gov't)
> lsteinke(a)tapestrytech.com (com'l)
>
>> -----Original Message-----
>> From: scap-security-guide-bounces(a)lists.fedorahosted.org
[mailto:scap-
>> security-guide-bounces(a)lists.fedorahosted.org] On Behalf Of Shawn
Wells
>> Sent: Wednesday, July 17, 2013 2:14 PM
>> To: scap-security-guide(a)lists.fedorahosted.org
>> Subject: Re: Roadmap for next official DISA RHEL6 STIG release?
>>
>> On 7/17/13 2:11 PM, Robert Sanders wrote:
>>> Is there a tentative date for the next release by DISA of the RHEL6
>>> STIG, both the manual and the benchmark? I'm writing code right
now
>>> looking at what is on the IASE web site (because that is what is
>>> 'official'), but I know there are just a few differences between
that
>>> and what is in the SSG 'upstream' code base (kernel module
/bin/true
>>> vice /bin/false for example). Just wondering when the next
iteration
>>> will become official....
>> The next STIG release should be on 26-JULY:
>>
http://iase.disa.mil/stigs/fso_schedule.html
>>
>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide(a)lists.fedorahosted.org
>>
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide