[PATCH 0/4] ability to view pre-release draft RHEL 6 STIG profile, prose cleanup

Jeffrey Blank blank at eclipse.ncsc.mil
Sun Jun 24 20:41:02 UTC 2012


The major goal of this commit is to provide the ability for consumers to easily view
the project's Rules as "requirements" for the pre-release draft RHEL 6 STIG.
This will help ensure productive consensus group meetings, by
ensuring participants can view the Rules and generate feedback prior to the meetings.
Usage of the project also ensures effective capture of consensus decisions.
Mapping of the CCIs from the OS SRG continues (in parallel), which is an
essential element for submitting the content as a STIG.

Jeffrey Blank (4):
  added Makerule, transform to create table for RHEL 6 STIG Profile
    (Pre-release Draft)
  cleanup of prose for sysctl network parameter settings      *
    expurgated weird CCE description text      * introduced usage of
    new macros for XCCDF sysctl description
  cleanup of prose for rsyslog logging      * OVAL for these remains
    difficult      * can we grab a filename from a text file, and then
    run tests on it?
  cleanup of prose for iptables

 rhel6/src/Makefile                                 |    8 +-
 rhel6/src/input/profiles/STIG-server.xml           |    5 +-
 rhel6/src/input/system/logging.xml                 |  220 +++++++++++-------
 rhel6/src/input/system/network/iptables.xml        |   51 +++--
 rhel6/src/input/system/network/kernel.xml          |  242 ++++++++++----------
 rhel6/src/transforms/shorthand2xccdf.xslt          |   15 ++
 rhel6/src/transforms/xccdf-addprofiles.xslt        |    1 +
 .../src/transforms/xccdf2table-profileccirefs.xslt |  170 ++++++++++++++
 8 files changed, 481 insertions(+), 231 deletions(-)
 create mode 100644 rhel6/src/transforms/xccdf2table-profileccirefs.xslt



More information about the scap-security-guide mailing list