[PATCH 00/13] NIST 800-53 References
Shawn Wells
shawn at redhat.com
Wed Apr 25 13:21:30 UTC 2012
On 4/25/12 9:11 AM, Willy Santos wrote:
> From: Willy Santos<wsantos at redhat>
>
> The following commits add NIST 800-53 references to all rules that did not already have them (<nist ref= />).
>
> Willy Santos (13):
> Added 800-53 refs to Avahi rules.
> Added 800-53 refs for base services.
> Added 800-53 refs for IPSec.
> Added 800-53 refs for login banners.
> Added 800-53 refs for iptables.
> Added 800-53 refs for IPv6 rules.
> Added 800-53 refs for networking rules.
> Added 800-53 refs for SSL.
> Added 800-53 refs for uncommon rules.
> Added 800-53 refs for permission execution rules.
> Added 800-53 refs for mounting rules.
> Added 800-53 refs for selinux rules.
> Added 800-53 refs for software integrity rules.
Given that we're converting the mappings from NIST over to the CCIs
(which get us things like NIST 800-53 and OS SRG for free) these patches
will have a short lifespan, however they do provide us with a foundation
for identifying what potential CCIs the rules apply to. Ack for the
patchset, so that these can provide a base for mapping to appropriate CCIs.
More information about the scap-security-guide
mailing list