Cross DISA STIG to the SCAP Profiles
Steinke, Leland J Sr CTR DISA FSO (US)
leland.j.steinke.ctr at mail.mil
Tue Dec 17 18:33:26 UTC 2013
Look at RHEL6/input/auxiliary/stig_overlay.xml. It has the latest mappings between DISA STIG IDs and SSG Rule IDs.
Regards,
--
Leland Steinke, Security+
DISA FSO Technical Support Contractor
tapestry technologies, Inc
717-267-5797 (DSN 570)
leland.j.steinke.ctr at mail.mil (gov't)
lsteinke at tapestrytech.com (com'l)
> -----Original Message-----
> From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-
> security-guide-bounces at lists.fedorahosted.org] On Behalf Of
> joescap at mm.st
> Sent: Tuesday, December 17, 2013 1:12 PM
> To: scap-security-guide at lists.fedorahosted.org
> Subject: Cross DISA STIG to the SCAP Profiles
>
> Can anyone suggest a way I can cross the tests in the SCAP profiles
> (specifically the stig-rhel6-server) with the tests in the official
> DISA
> STIG? I've looked through the various xml files as well as this
> catalog
> (http://people.redhat.com/swells/scap-security-
> guide/RHEL6/output/rhel6-guide-custom.html).
> I don't see any numbers that correspond between the two. The only way
> I
> can see to do it is read every test narrative and try to correlate the
> two.
>
> The reason, I have an automated tool that has the full DISA stig loaded
> that I'd like to modify to resemble the stig-rhel6-serve profile. The
> tool can not import the SCAP content yet (should be able to soon
> though), so in the meantime I'd like to make the DISA STIG look like
> the
> stig-rhel6-server profile as much as I can. Any suggestions?
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5601 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20131217/a7e4b167/attachment.bin>
More information about the scap-security-guide
mailing list