This was a script I created to facilitate in updating STIG references
within SCAP content.
It was intended to address the challenge of keeping the SCAP content in
alignment with current STIG content.
In general, the script parses through each STIG requirement in the STIG
overlay file, finds the associated rule id, then updates the STIG
overlay file and the rule id references with the following data from the
STIG:
- Requirement Title
- CCI
- CCE
- Severity
- SVKey
- VRelease
- IA Controls
This helps reduce allot of the administrative overhead so that more
focus can be directed to the actual content.
On Wed, 2016-02-17 at 14:14 +0000, Mike Kuhnkey wrote:
Has someone checked out the script in DISA's STIG Release?
->U_Red_Hat_Enterprise_Linux_7_V1R0-1_Manual_STIG/Test/stig_refs.sh
I find the instructions alarming on how to use the script.
It is to be placed in the RHEL 5 folder (scap-security-guide project) and run.....
....am I off in left field here?
What happens during make rhel7-dist -> content?
Is this where/how the DRAFT was created?
--
SCAP Security Guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/scap-security-guide@lists.fedo...
https://github.com/OpenSCAP/scap-security-guide/
--
Best regards,
Trey Henefield, CISSP
Senior IAVA Engineer
Ultra Electronics
Advanced Tactical Systems, Inc.
4101 Smith School Road
Building IV, Suite 100
Austin, TX 78744 USA
Trey.Henefield(a)ultra-ats.com
Tel: +1 512 327 6795 ext. 647
Fax: +1 512 327 8043
Mobile: +1 512 541 6450
www.ultra-ats.com
Disclaimer
The information contained in this communication from trey.henefield(a)ultra-ats.com sent at
2016-02-17 10:06:11 is confidential and may be legally privileged.
It is intended solely for use by scap-security-guide(a)lists.fedorahosted.org and others
authorized to receive it. If you are not scap-security-guide(a)lists.fedorahosted.org you
are hereby notified that
any disclosure, copying, distribution or taking action in reliance of the contents of this
information is strictly prohibited and may be unlawful.