Cross DISA STIG to the SCAP Profiles
joescap at mm.st
joescap at mm.st
Thu Dec 19 01:14:21 UTC 2013
That was what I was looking for. Thanks!
On Tue, Dec 17, 2013, at 11:33 AM, Steinke, Leland J Sr CTR DISA FSO
(US) wrote:
> Look at RHEL6/input/auxiliary/stig_overlay.xml. It has the latest
> mappings between DISA STIG IDs and SSG Rule IDs.
>
>
> Regards,
> --
> Leland Steinke, Security+
> DISA FSO Technical Support Contractor
> tapestry technologies, Inc
> 717-267-5797 (DSN 570)
> leland.j.steinke.ctr at mail.mil (gov't)
> lsteinke at tapestrytech.com (com'l)
>
>
> > -----Original Message-----
> > From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-
> > security-guide-bounces at lists.fedorahosted.org] On Behalf Of
> > joescap at mm.st
> > Sent: Tuesday, December 17, 2013 1:12 PM
> > To: scap-security-guide at lists.fedorahosted.org
> > Subject: Cross DISA STIG to the SCAP Profiles
> >
> > Can anyone suggest a way I can cross the tests in the SCAP profiles
> > (specifically the stig-rhel6-server) with the tests in the official
> > DISA
> > STIG? I've looked through the various xml files as well as this
> > catalog
> > (http://people.redhat.com/swells/scap-security-
> > guide/RHEL6/output/rhel6-guide-custom.html).
> > I don't see any numbers that correspond between the two. The only way
> > I
> > can see to do it is read every test narrative and try to correlate the
> > two.
> >
> > The reason, I have an automated tool that has the full DISA stig loaded
> > that I'd like to modify to resemble the stig-rhel6-serve profile. The
> > tool can not import the SCAP content yet (should be able to soon
> > though), so in the meantime I'd like to make the DISA STIG look like
> > the
> > stig-rhel6-server profile as much as I can. Any suggestions?
> > _______________________________________________
> > scap-security-guide mailing list
> > scap-security-guide at lists.fedorahosted.org
> > https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> Email had 1 attachment:
> + smime.p7s
> 7k (application/x-pkcs7-signature)
More information about the scap-security-guide
mailing list