Cross DISA STIG to the SCAP Profiles

Steinke, Leland J Sr CTR DISA FSO (US) leland.j.steinke.ctr at mail.mil
Tue Dec 17 18:33:26 UTC 2013


Look at RHEL6/input/auxiliary/stig_overlay.xml.  It has the latest mappings between DISA STIG IDs and SSG Rule IDs.


Regards,
--
Leland Steinke, Security+
DISA FSO Technical Support Contractor
tapestry technologies, Inc
717-267-5797 (DSN 570)
leland.j.steinke.ctr at mail.mil (gov't)
lsteinke at tapestrytech.com (com'l)


> -----Original Message-----
> From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-
> security-guide-bounces at lists.fedorahosted.org] On Behalf Of
> joescap at mm.st
> Sent: Tuesday, December 17, 2013 1:12 PM
> To: scap-security-guide at lists.fedorahosted.org
> Subject: Cross DISA STIG to the SCAP Profiles
> 
> Can anyone suggest a way I can cross the tests in the SCAP profiles
> (specifically the stig-rhel6-server) with the tests in the official
> DISA
> STIG?   I've looked through the various xml files as well as this
> catalog
> (http://people.redhat.com/swells/scap-security-
> guide/RHEL6/output/rhel6-guide-custom.html).
>  I don't see any numbers that correspond between the two. The only way
> I
> can see to do it is read every test narrative and try to correlate the
> two.
> 
> The reason, I have an automated tool that has the full DISA stig loaded
> that I'd like to modify to resemble the stig-rhel6-serve profile.  The
> tool can not import the SCAP content yet (should be able to soon
> though), so in the meantime I'd like to make the DISA STIG look like
> the
> stig-rhel6-server profile as much as I can.  Any suggestions?
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5601 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131217/a7e4b167/attachment.bin>


More information about the scap-security-guide mailing list