apologize for a late reply.
----- Original Message -----
Sent: Thursday, January 7, 2016 12:48:55 AM
Subject: Understanding the Pieces
I'm trying to understand all the pieces of SSG and how it relates to the
content on the National Checklist Program Repository, specifically for
If under "official" NCPR content for Red Hat Enterprise Linux 6 you mean
the Red Hat 6 STIG Version 1, Release 9:
then the answer is yes, this content is being derived from the latest
content for RHEL/6 product, as being available in SSG.
If under "official" content for RHEL-6 system you have meant also this
I can't comment on that (don't have the information) which content is this
being based on (you would need to check with Oracle Linux 6 product vendor).
In RHEL6, I did a yum install scap-security-guide to get the SSG from
the Redhat repos. I took a look at
file:///usr/share/doc/scap-security-guide-0.1.21/rhel6-guide.html and I
can see all the settings, but does this include everything that is in
the SCAP content found on the NIST National Checklist Program
Yes (in the sense content in  is being gradually derived from the latest
code for RHEL/6 product as being available in SCAP Security Guide repository).
Are there any kickstarts available to help configure systems?
Yes. Check out the content of the 'kickstart' directory, included within
* Case a) -- this is the content of that directory with
# rpm -q scap-security-guide
# rpm -ql scap-security-guide | grep kickstart
* Case b) -- this is the current content of that directory
as present in SSG 'master':
the 'ssg-rhel6-stig-ks.cfg' corresponds to the content of  benchmark.
confused on how this all fits together.
Hope this helps.
Thank you && Regards, Jan.
Jan iankko Lieskovsky / Red Hat Security Technologies Team
> SCAP Security Guide mailing list