Question for the group: The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.
Should we create a zip file in addition to the RPM?
-------- Original Message -------- Subject: SCAP Compliance Checker 3.1 Final Release Date: Wed, 13 Feb 2013 11:16:33 -0500 From: SSC LANT-SCC ssc_lant-scc.fcm@navy.mil To: SSC LANT-SCC ssc_lant-scc.fcm@navy.mil
We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month. We are pleased to announce that we have finished development of SCC 3.1.
Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.
You'll be receiving an email from AMRDEC in the next hour with download instructions
Primary Changes from SCC 3.0.x to 3.1
For All Platforms . Updated default location for Logs and Results to be dynamic based on each user's profile/home directory. . Added applicable DISA STIG SCAP Benchmarks to each installer. . Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues. . Added support for OVAL 'unique' function. . Added support for OVAL 'count' function. . Added ability to copy results via SSH to a centralized server. . Improved OCIL functionality to allow for resuming of partially completed questionnaires. . Improved documentation in the User Manual.
For Windows . Added ability to install and run as a service. . Added support for case insensitivity to several OVAL tests . Added support for OVAL windows cmdlet test, object, state. . Updated registry tests to support OVAL 5.10 'windows_view'. . Updated file test to support OVAL 5.10 'windows_view'.
For UNIX For all UNIX (Linux, Solaris, Mac OS X) . Added support for OVAL UNIX fileextendedattribute test, object, state. . Added support for UNIX sysctl test, object, state.
For Linux . Added support for linux selinuxboolean test, object, state. . Added support for linux selinuxsecuritycontext test, object, state. . Added support for linux rpmverifyfile test, object, state. . Added support for linux rpmverify test, object, state. . Added support for linux rpmverifypackage test, object, state.
For Solaris . Added support for Solaris packagecheck test, object, state.
For Mac OS X Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.
Kyle R. Stone SPAWAR Systems Center Atlantic Code 58600 (843) 218-5091 kyle.r.stone@navy.mil
+1 for zip file!
R/
Vince
From: Shawn Wells <shawn@redhat.commailto:shawn@redhat.com> Organization: Red Hat Reply-To: "scap-security-guide@lists.fedorahosted.orgmailto:scap-security-guide@lists.fedorahosted.org" <scap-security-guide@lists.fedorahosted.orgmailto:scap-security-guide@lists.fedorahosted.org> Date: Wednesday, February 13, 2013 12:35 PM To: "scap-security-guide@lists.fedorahosted.orgmailto:scap-security-guide@lists.fedorahosted.org" <scap-security-guide@lists.fedorahosted.orgmailto:scap-security-guide@lists.fedorahosted.org> Subject: Fwd: SCAP Compliance Checker 3.1 Final Release
Question for the group: The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.
Should we create a zip file in addition to the RPM?
-------- Original Message -------- Subject: SCAP Compliance Checker 3.1 Final Release Date: Wed, 13 Feb 2013 11:16:33 -0500 From: SSC LANT-SCC ssc_lant-scc.fcm@navy.milmailto:ssc_lant-scc.fcm@navy.mil To: SSC LANT-SCC ssc_lant-scc.fcm@navy.milmailto:ssc_lant-scc.fcm@navy.mil
We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month. We are pleased to announce that we have finished development of SCC 3.1.
Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.
You'll be receiving an email from AMRDEC in the next hour with download instructions
Primary Changes from SCC 3.0.x to 3.1
For All Platforms . Updated default location for Logs and Results to be dynamic based on each user's profile/home directory. . Added applicable DISA STIG SCAP Benchmarks to each installer. . Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues. . Added support for OVAL 'unique' function. . Added support for OVAL 'count' function. . Added ability to copy results via SSH to a centralized server. . Improved OCIL functionality to allow for resuming of partially completed questionnaires. . Improved documentation in the User Manual.
For Windows . Added ability to install and run as a service. . Added support for case insensitivity to several OVAL tests . Added support for OVAL windows cmdlet test, object, state. . Updated registry tests to support OVAL 5.10 'windows_view'. . Updated file test to support OVAL 5.10 'windows_view'.
For UNIX For all UNIX (Linux, Solaris, Mac OS X) . Added support for OVAL UNIX fileextendedattribute test, object, state. . Added support for UNIX sysctl test, object, state.
For Linux . Added support for linux selinuxboolean test, object, state. . Added support for linux selinuxsecuritycontext test, object, state. . Added support for linux rpmverifyfile test, object, state. . Added support for linux rpmverify test, object, state. . Added support for linux rpmverifypackage test, object, state.
For Solaris . Added support for Solaris packagecheck test, object, state.
For Mac OS X Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.
Kyle R. Stone SPAWAR Systems Center Atlantic Code 58600 (843) 218-5091 kyle.r.stone@navy.milmailto:kyle.r.stone@navy.mil
My thought would be a 'yes', but so far I've only been using the RHEL5 content - haven't played with the RHEL6 beta yet in any form.
-Rob
________________________________ From: scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap-security-guide-bounces@lists.fedorahosted.org] On Behalf Of Shawn Wells Sent: Wednesday, February 13, 2013 12:36 PM To: scap-security-guide@lists.fedorahosted.org Subject: Fwd: SCAP Compliance Checker 3.1 Final Release
Question for the group: The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.
Should we create a zip file in addition to the RPM?
-------- Original Message -------- Subject: SCAP Compliance Checker 3.1 Final Release Date: Wed, 13 Feb 2013 11:16:33 -0500 From: SSC LANT-SCC ssc_lant-scc.fcm@navy.milmailto:ssc_lant-scc.fcm@navy.mil To: SSC LANT-SCC ssc_lant-scc.fcm@navy.milmailto:ssc_lant-scc.fcm@navy.mil
We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month. We are pleased to announce that we have finished development of SCC 3.1.
Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.
You'll be receiving an email from AMRDEC in the next hour with download instructions
Primary Changes from SCC 3.0.x to 3.1
For All Platforms . Updated default location for Logs and Results to be dynamic based on each user's profile/home directory. . Added applicable DISA STIG SCAP Benchmarks to each installer. . Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues. . Added support for OVAL 'unique' function. . Added support for OVAL 'count' function. . Added ability to copy results via SSH to a centralized server. . Improved OCIL functionality to allow for resuming of partially completed questionnaires. . Improved documentation in the User Manual.
For Windows . Added ability to install and run as a service. . Added support for case insensitivity to several OVAL tests . Added support for OVAL windows cmdlet test, object, state. . Updated registry tests to support OVAL 5.10 'windows_view'. . Updated file test to support OVAL 5.10 'windows_view'.
For UNIX For all UNIX (Linux, Solaris, Mac OS X) . Added support for OVAL UNIX fileextendedattribute test, object, state. . Added support for UNIX sysctl test, object, state.
For Linux . Added support for linux selinuxboolean test, object, state. . Added support for linux selinuxsecuritycontext test, object, state. . Added support for linux rpmverifyfile test, object, state. . Added support for linux rpmverify test, object, state. . Added support for linux rpmverifypackage test, object, state.
For Solaris . Added support for Solaris packagecheck test, object, state.
For Mac OS X Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.
Kyle R. Stone SPAWAR Systems Center Atlantic Code 58600 (843) 218-5091 kyle.r.stone@navy.milmailto:kyle.r.stone@navy.mil
On 02/13/2013 12:35 PM, Shawn Wells wrote:
Question for the group: The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.
Should we create a zip file in addition to the RPM?
I haven't used SCC, but NIST distributes content as zip archives, and many tools expect precisely that.
Shawn, I have used the SSG content through with the SCC tool in the past, it was no issue to compress it and add the content. Just nothing states that it must be a zip file to import properly. Having the content avail already zipped for SCC import would be nice. Hopefully SCC gets a timely update, because I just use OpenSCAP for now.
R/ Brian Peake
On Feb 13, 2013, at 12:35 PM, Shawn Wells shawn@redhat.com wrote:
Question for the group: The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.
Should we create a zip file in addition to the RPM?
-------- Original Message -------- Subject: SCAP Compliance Checker 3.1 Final Release Date: Wed, 13 Feb 2013 11:16:33 -0500 From: SSC LANT-SCC ssc_lant-scc.fcm@navy.mil To: SSC LANT-SCC ssc_lant-scc.fcm@navy.mil
We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month. We are pleased to announce that we have finished development of SCC 3.1.
Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.
You'll be receiving an email from AMRDEC in the next hour with download instructions
Primary Changes from SCC 3.0.x to 3.1
For All Platforms . Updated default location for Logs and Results to be dynamic based on each user's profile/home directory. . Added applicable DISA STIG SCAP Benchmarks to each installer. . Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues. . Added support for OVAL 'unique' function. . Added support for OVAL 'count' function. . Added ability to copy results via SSH to a centralized server. . Improved OCIL functionality to allow for resuming of partially completed questionnaires. . Improved documentation in the User Manual.
For Windows . Added ability to install and run as a service. . Added support for case insensitivity to several OVAL tests . Added support for OVAL windows cmdlet test, object, state. . Updated registry tests to support OVAL 5.10 'windows_view'. . Updated file test to support OVAL 5.10 'windows_view'.
For UNIX For all UNIX (Linux, Solaris, Mac OS X) . Added support for OVAL UNIX fileextendedattribute test, object, state. . Added support for UNIX sysctl test, object, state.
For Linux . Added support for linux selinuxboolean test, object, state. . Added support for linux selinuxsecuritycontext test, object, state. . Added support for linux rpmverifyfile test, object, state. . Added support for linux rpmverify test, object, state. . Added support for linux rpmverifypackage test, object, state.
For Solaris . Added support for Solaris packagecheck test, object, state.
For Mac OS X Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.
Kyle R. Stone SPAWAR Systems Center Atlantic Code 58600 (843) 218-5091 kyle.r.stone@navy.mil
scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
I will be testing 3.1 SCC tomorrow hopefully. Off to grab your content and zip it up :-)
Shawn, I have used the SSG content through with the SCC tool in the past, it was no issue to compress it and add the content. Just nothing states that it must be a zip file to import properly. Having the content avail already zipped for SCC import would be nice. Hopefully SCC gets a timely update, because I just use OpenSCAP for now.
R/ Brian Peake
On Feb 13, 2013, at 12:35 PM, Shawn Wells shawn@redhat.com wrote:
Question for the group: The SCC tool requires that content be packaged
in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.
Should we create a zip file in addition to the RPM?
-------- Original Message -------- Subject: SCAP Compliance Checker 3.1 Final Release Date: Wed, 13 Feb 2013 11:16:33 -0500 From: SSC LANT-SCC ssc_lant-scc.fcm@navy.mil mailto:ssc_lant-scc.fcm@navy.mil To: SSC LANT-SCC ssc_lant-scc.fcm@navy.mil mailto:ssc_lant-scc.fcm@navy.mil
We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month. We are pleased to announce that we have finished development of SCC 3.1.
Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.
You'll be receiving an email from AMRDEC in the next hour with download instructions
Primary Changes from SCC 3.0.x to 3.1
For All Platforms . Updated default location for Logs and Results to be dynamic based on each user's profile/home directory. . Added applicable DISA STIG SCAP Benchmarks to each installer. . Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues. . Added support for OVAL 'unique' function. . Added support for OVAL 'count' function. . Added ability to copy results via SSH to a centralized server. . Improved OCIL functionality to allow for resuming of partially completed questionnaires. . Improved documentation in the User Manual.
For Windows . Added ability to install and run as a service. . Added support for case insensitivity to several OVAL tests . Added support for OVAL windows cmdlet test, object, state. . Updated registry tests to support OVAL 5.10 'windows_view'. . Updated file test to support OVAL 5.10 'windows_view'.
For UNIX For all UNIX (Linux, Solaris, Mac OS X) . Added support for OVAL UNIX fileextendedattribute test, object, state. . Added support for UNIX sysctl test, object, state.
For Linux . Added support for linux selinuxboolean test, object, state. . Added support for linux selinuxsecuritycontext test, object, state. . Added support for linux rpmverifyfile test, object, state. . Added support for linux rpmverify test, object, state. . Added support for linux rpmverifypackage test, object, state.
For Solaris . Added support for Solaris packagecheck test, object, state.
For Mac OS X Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.
Kyle R. Stone SPAWAR Systems Center Atlantic Code 58600 (843) 218-5091 kyle.r.stone@navy.mil
scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
_______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
scap-security-guide@lists.fedorahosted.org