Can anyone suggest a way I can cross the tests in the SCAP profiles (specifically the stig-rhel6-server) with the tests in the official DISA STIG? I've looked through the various xml files as well as this catalog (http://people.redhat.com/swells/scap-security-guide/RHEL6/output/rhel6-guide...). I don't see any numbers that correspond between the two. The only way I can see to do it is read every test narrative and try to correlate the two.
The reason, I have an automated tool that has the full DISA stig loaded that I'd like to modify to resemble the stig-rhel6-serve profile. The tool can not import the SCAP content yet (should be able to soon though), so in the meantime I'd like to make the DISA STIG look like the stig-rhel6-server profile as much as I can. Any suggestions?
Look at RHEL6/input/auxiliary/stig_overlay.xml. It has the latest mappings between DISA STIG IDs and SSG Rule IDs.
Regards, -- Leland Steinke, Security+ DISA FSO Technical Support Contractor tapestry technologies, Inc 717-267-5797 (DSN 570) leland.j.steinke.ctr@mail.mil (gov't) lsteinke@tapestrytech.com (com'l)
-----Original Message----- From: scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap- security-guide-bounces@lists.fedorahosted.org] On Behalf Of joescap@mm.st Sent: Tuesday, December 17, 2013 1:12 PM To: scap-security-guide@lists.fedorahosted.org Subject: Cross DISA STIG to the SCAP Profiles
Can anyone suggest a way I can cross the tests in the SCAP profiles (specifically the stig-rhel6-server) with the tests in the official DISA STIG? I've looked through the various xml files as well as this catalog (http://people.redhat.com/swells/scap-security- guide/RHEL6/output/rhel6-guide-custom.html). I don't see any numbers that correspond between the two. The only way I can see to do it is read every test narrative and try to correlate the two.
The reason, I have an automated tool that has the full DISA stig loaded that I'd like to modify to resemble the stig-rhel6-serve profile. The tool can not import the SCAP content yet (should be able to soon though), so in the meantime I'd like to make the DISA STIG look like the stig-rhel6-server profile as much as I can. Any suggestions? _______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
That was what I was looking for. Thanks!
On Tue, Dec 17, 2013, at 11:33 AM, Steinke, Leland J Sr CTR DISA FSO (US) wrote:
Look at RHEL6/input/auxiliary/stig_overlay.xml. It has the latest mappings between DISA STIG IDs and SSG Rule IDs.
Regards,
Leland Steinke, Security+ DISA FSO Technical Support Contractor tapestry technologies, Inc 717-267-5797 (DSN 570) leland.j.steinke.ctr@mail.mil (gov't) lsteinke@tapestrytech.com (com'l)
-----Original Message----- From: scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap- security-guide-bounces@lists.fedorahosted.org] On Behalf Of joescap@mm.st Sent: Tuesday, December 17, 2013 1:12 PM To: scap-security-guide@lists.fedorahosted.org Subject: Cross DISA STIG to the SCAP Profiles
Can anyone suggest a way I can cross the tests in the SCAP profiles (specifically the stig-rhel6-server) with the tests in the official DISA STIG? I've looked through the various xml files as well as this catalog (http://people.redhat.com/swells/scap-security- guide/RHEL6/output/rhel6-guide-custom.html). I don't see any numbers that correspond between the two. The only way I can see to do it is read every test narrative and try to correlate the two.
The reason, I have an automated tool that has the full DISA stig loaded that I'd like to modify to resemble the stig-rhel6-serve profile. The tool can not import the SCAP content yet (should be able to soon though), so in the meantime I'd like to make the DISA STIG look like the stig-rhel6-server profile as much as I can. Any suggestions? _______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide Email had 1 attachment:
- smime.p7s 7k (application/x-pkcs7-signature)
scap-security-guide@lists.fedorahosted.org