[PATCH 0/8] repairs/improvements to CCI refs

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Dec 17 14:15:31 UTC 2012


A collection of repairs and updates to CCI references,
in support of addressing all OS SRG requirements as
viewed in output/table-stig-rhel6-server-flat-srgs.html.

Jeffrey Blank (8):
  adjusting references to DISA CCIs in services
  adjusting DISA CCI references in system config items
  rework of CCI references in SRG support file to indicate selection on
    DoD baselines
  adding creation of new SRG-complete table with CCI refs combined (vs
    flattened)
  new alt-titles for STIG Rules, CCI references updates
  added Rule for encrypting partitions to stig profile
  removing CCI refs when attached to Groups, in favor of Rules or
    srg_support
  support for adding SRG ID items to unflattened profile table

 RHEL6/Makefile                                    |    1 +
 RHEL6/input/auxiliary/alt-titles-stig.xml         |   24 ++++--
 RHEL6/input/auxiliary/srg_support.xml             |   88 ++++++++++++++-------
 RHEL6/input/profiles/stig-rhel6-server.xml        |    9 +--
 RHEL6/input/services/http.xml                     |    4 +-
 RHEL6/input/services/obsolete.xml                 |    6 +-
 RHEL6/input/services/ssh.xml                      |    4 +-
 RHEL6/input/system/accounts/pam.xml               |    1 -
 RHEL6/input/system/auditing.xml                   |    5 +-
 RHEL6/input/system/network/ipsec.xml              |    2 +-
 RHEL6/input/system/network/iptables.xml           |    5 +-
 RHEL6/input/system/network/ssl.xml                |    4 -
 RHEL6/input/system/software/disk_partitioning.xml |   41 ++++++----
 RHEL6/input/system/software/integrity.xml         |    3 +-
 RHEL6/input/system/software/updating.xml          |    3 +-
 RHEL6/transforms/table-add-srgitems.xslt          |    2 +-
 16 files changed, 118 insertions(+), 84 deletions(-)



More information about the scap-security-guide mailing list