[PATCH 00/13] NIST 800-53 References

Shawn Wells shawn at redhat.com
Wed Apr 25 13:21:30 UTC 2012


On 4/25/12 9:11 AM, Willy Santos wrote:
> From: Willy Santos<wsantos at redhat>
>
> The following commits add NIST 800-53 references to all rules that did not already have them (<nist ref= />).
>
> Willy Santos (13):
>    Added 800-53 refs to Avahi rules.
>    Added 800-53 refs for base services.
>    Added 800-53 refs for IPSec.
>    Added 800-53 refs for login banners.
>    Added 800-53 refs for iptables.
>    Added 800-53 refs for IPv6 rules.
>    Added 800-53 refs for networking rules.
>    Added 800-53 refs for SSL.
>    Added 800-53 refs for uncommon rules.
>    Added 800-53 refs for permission execution rules.
>    Added 800-53 refs for mounting rules.
>    Added 800-53 refs for selinux rules.
>    Added 800-53 refs for software integrity rules.



Given that we're converting the mappings from NIST over to the CCIs 
(which get us things like NIST 800-53 and OS SRG for free) these patches 
will have a short lifespan, however they do provide us with a foundation 
for identifying what potential CCIs the rules apply to. Ack for the 
patchset, so that these can provide a base for mapping to appropriate CCIs.




More information about the scap-security-guide mailing list