Hi Mark,
Related topic....
Do you know if the FIPS Software Modules/Libraries that RedHat certifies RHEL8.x will be
included in CENTOS Stream (similar to existing CENTOS approach), or will CENTOS Stream
have different Crypto Software? Also, any nuances or strategy changes we may need to be
aware of as to OpenScap and Benchmarks for CENTOS Stream?
Jeff
________________________________
From: Mark Thacker <mthacker(a)redhat.com>
Sent: Sunday, December 27, 2020 8:05 AM
To: SCAP Security Guide <scap-security-guide(a)lists.fedorahosted.org>; Ted Brunell
<tbrunell(a)redhat.com>
Subject: Re: Any rumors on next draft for RHEL 8 STIG from DISA?
Hi all,
An update :
* RHEL 8 Common Criteria is in process and we expect to complete and announce in EARLY Q1
CY2021
* RHEL 8 FIPS is finishing now! Actually, two of our certs are in hand now for RHEL 8 with
three more in the final stages (in Coordination state). We expect to push a press release
when we have all of the module validation certificates completed.
Again, expect that we will announce more publicly when we have completed the
certifications for each of these standards.
On 12/2/20 4:30 PM, Ted Brunell wrote:
I cannot really talk much about CC and FIPS, but the STIG is expected to be published by
DISA (based on the draft STIG content on RHEL 8.2 and 8.3) sometime early next year.
DISA may be able to provide a more concise timeframe.
(disa.stig_spt@mail.mil<mailto:disa.stig_spt@mail.mil>).
R/
Ted Brunell
On Wed, Dec 2, 2020 at 12:14 PM Hayden,Robert
<RHAYDEN@cerner.com<mailto:RHAYDEN@cerner.com>> wrote:
Curious on if anyone has any information on the next draft release from DISA on RHEL 8
STIG benchmarks? The one in May was pretty rough and did not really match where the
current upstream was moving towards.
Thanks in advance
Robert
Robert Hayden | Lead Technology Architect | Cerner Corporation
CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner
Corporation and are intended only for the addressee. The information contained in this
message is confidential and may constitute inside or non-public information under
international, federal, or state securities laws. Unauthorized forwarding, printing,
copying, distribution, or use of such information is strictly prohibited and may be
unlawful. If you are not the addressee, please promptly delete this message and notify the
sender of the delivery error by e-mail or you may call Cerner's corporate offices in
Kansas City, Missouri, U.S.A at (+1) (816)221-1024.
_______________________________________________
scap-security-guide mailing list --
scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>
To unsubscribe send an email to
scap-security-guide-leave@lists.fedorahosted.org<mailto:scap-security-guide-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fe...
_______________________________________________
scap-security-guide mailing list --
scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>
To unsubscribe send an email to
scap-security-guide-leave@lists.fedorahosted.org<mailto:scap-security-guide-leave@lists.fedorahosted.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fe...
--
Mark Thacker
He/Him
Team Lead & Security Experience Product Manager, Red Hat Enterprise Linux
Red Hat <
https://www.redhat.com>
mthacker@redhat.com<mailto:mthacker@redhat.com>
M: +1-214-636-7004<tel:+1-214-636-7004> Twitter / IRC: @thackman
[
https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c...