On 11/29/16 10:49 AM, Watson Yuuma Sato wrote:
> Hi folks,
> We have the pleasure to announce that SCAP Security Guide release
> has been created.
> Highlights of this release:
> * New Wind River Linux profiles,
> * Various STIG profile enhancements,
> * Ubuntu Xenial product has been added,
> * Support for Ansible remediations,
> * Refactored build process, with more shared content
> * The build system for RPM is simpler now,
> * SCAP benchmark for Red Hat Enterprise Linux 6 and Red Hat
> Enterprise Linux 7 passes official NIST SCAP Content Validation Tool
> For a more detailed overview of changes (bug fixes, enhancements)
> in this release please have a look at more detailed changelog:
> * https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.31
> Full changelog at:
> Zip archives with pre-built benchmarks in DataStream form:
> (Zip archive using OVAL-5.11.1 language version)
> (Zip archive using OVAL-5.10 language version)
> As this is one of the biggest SSG releases ever made, the team would
> like to
> give a great thank you to all contributors.
> Happy hardening!
> With regards,
> Watson Sato (on behalf of the SCAP Security Guide upstream team)
Where can I download RHEL RPMs (not trolling, promise!)?
COPR repos only have Fedora content:
Adding some color.
DISA allows customers to use "vendor published" content in absence of
DISA publishing something to
Was at Aberdeen Proving Grounds yesterday. Some people there are
tracking upstream and are allowed to use as it's considered "vendor
published." Trying to make their lives easier than downloading a zip
file (as there's no version tracking / RPM integration with that approach).