SCAP Compliance Checker 3.1 Final Release

Vincent Passaro vince.passaro at fotisnetworks.com
Wed Feb 13 17:37:27 UTC 2013


+1 for zip file!

R/

Vince


From: Shawn Wells <shawn at redhat.com<mailto:shawn at redhat.com>>
Organization: Red Hat
Reply-To: "scap-security-guide at lists.fedorahosted.org<mailto:scap-security-guide at lists.fedorahosted.org>" <scap-security-guide at lists.fedorahosted.org<mailto:scap-security-guide at lists.fedorahosted.org>>
Date: Wednesday, February 13, 2013 12:35 PM
To: "scap-security-guide at lists.fedorahosted.org<mailto:scap-security-guide at lists.fedorahosted.org>" <scap-security-guide at lists.fedorahosted.org<mailto:scap-security-guide at lists.fedorahosted.org>>
Subject: Fwd: SCAP Compliance Checker 3.1 Final Release

Question for the group:  The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.

Should we create a zip file in addition to the RPM?



-------- Original Message --------
Subject:        SCAP Compliance Checker 3.1 Final Release
Date:   Wed, 13 Feb 2013 11:16:33 -0500
From:   SSC LANT-SCC <ssc_lant-scc.fcm at navy.mil><mailto:ssc_lant-scc.fcm at navy.mil>
To:     SSC LANT-SCC <ssc_lant-scc.fcm at navy.mil><mailto:ssc_lant-scc.fcm at navy.mil>



We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month.  We are pleased to announce that  we have finished development of SCC 3.1.

Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.

You'll be receiving an email from AMRDEC in the next hour with download instructions


Primary Changes from SCC 3.0.x to 3.1

For All Platforms
. Updated default location for Logs and Results to be dynamic based on each user's profile/home directory.
. Added applicable DISA STIG SCAP Benchmarks to each installer.
. Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues.
. Added support for OVAL 'unique' function.
. Added support for OVAL 'count' function.
. Added ability to copy results via SSH to a centralized server.
. Improved OCIL functionality to allow for resuming of partially completed questionnaires.
. Improved documentation in the User Manual.

For Windows
. Added ability to install and run as a service.
. Added support for case insensitivity to several OVAL tests
. Added support for OVAL windows cmdlet test, object, state.
. Updated registry tests to support OVAL 5.10 'windows_view'.
. Updated file test to support OVAL 5.10 'windows_view'.

For UNIX
For all UNIX (Linux, Solaris, Mac OS X)
. Added support for OVAL UNIX fileextendedattribute test, object, state.
. Added support for UNIX sysctl test, object, state.

For Linux
. Added support for linux selinuxboolean test, object, state.
. Added support for linux selinuxsecuritycontext test, object, state.
. Added support for linux rpmverifyfile test, object, state.
. Added support for linux rpmverify test, object, state.
. Added support for linux rpmverifypackage test, object, state.

For Solaris
. Added support for Solaris packagecheck test, object, state.

For Mac OS X
Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.


Kyle R. Stone
SPAWAR Systems Center Atlantic
Code 58600
(843) 218-5091
kyle.r.stone at navy.mil<mailto:kyle.r.stone at navy.mil>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130213/e948e7e3/attachment-0001.html>


More information about the scap-security-guide mailing list