RHEL 5 STIG CCI IDs not in OS SRG

Willy Santos wsantos at redhat.com
Thu Jul 12 14:56:35 UTC 2012


In the process of mapping CCI IDs from the OS SRG to Rules/Groups in the SSG, we found a number of rules/requirements in the RHEL 5 STIG that are mapping to CCI IDs not in the OS SRG. 

In the SSG should we be mapping to CCI IDs not on the OS SRG, or is it preferred to map to items only in the OS SRG? Either one could be appropriate.

-Willy



More information about the scap-security-guide mailing list