SCAP Compliance Checker 3.1 Final Release

Robert Sanders rsanders at TrustedCS.com
Wed Feb 13 17:44:51 UTC 2013


My thought would be a 'yes', but so far I've only been using the RHEL5 content - haven't played with the RHEL6 beta yet in any form.

-Rob

________________________________
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Shawn Wells
Sent: Wednesday, February 13, 2013 12:36 PM
To: scap-security-guide at lists.fedorahosted.org
Subject: Fwd: SCAP Compliance Checker 3.1 Final Release

Question for the group:  The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*.

Should we create a zip file in addition to the RPM?



-------- Original Message --------
Subject:        SCAP Compliance Checker 3.1 Final Release
Date:   Wed, 13 Feb 2013 11:16:33 -0500
From:   SSC LANT-SCC <ssc_lant-scc.fcm at navy.mil><mailto:ssc_lant-scc.fcm at navy.mil>
To:     SSC LANT-SCC <ssc_lant-scc.fcm at navy.mil><mailto:ssc_lant-scc.fcm at navy.mil>



We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month.  We are pleased to announce that  we have finished development of SCC 3.1.

Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1.

You'll be receiving an email from AMRDEC in the next hour with download instructions


Primary Changes from SCC 3.0.x to 3.1

For All Platforms
. Updated default location for Logs and Results to be dynamic based on each user's profile/home directory.
. Added applicable DISA STIG SCAP Benchmarks to each installer.
. Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues.
. Added support for OVAL 'unique' function.
. Added support for OVAL 'count' function.
. Added ability to copy results via SSH to a centralized server.
. Improved OCIL functionality to allow for resuming of partially completed questionnaires.
. Improved documentation in the User Manual.

For Windows
. Added ability to install and run as a service.
. Added support for case insensitivity to several OVAL tests
. Added support for OVAL windows cmdlet test, object, state.
. Updated registry tests to support OVAL 5.10 'windows_view'.
. Updated file test to support OVAL 5.10 'windows_view'.

For UNIX
For all UNIX (Linux, Solaris, Mac OS X)
. Added support for OVAL UNIX fileextendedattribute test, object, state.
. Added support for UNIX sysctl test, object, state.

For Linux
. Added support for linux selinuxboolean test, object, state.
. Added support for linux selinuxsecuritycontext test, object, state.
. Added support for linux rpmverifyfile test, object, state.
. Added support for linux rpmverify test, object, state.
. Added support for linux rpmverifypackage test, object, state.

For Solaris
. Added support for Solaris packagecheck test, object, state.

For Mac OS X
Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests.


Kyle R. Stone
SPAWAR Systems Center Atlantic
Code 58600
(843) 218-5091
kyle.r.stone at navy.mil<mailto:kyle.r.stone at navy.mil>




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130213/a7aeef6e/attachment.html>


More information about the scap-security-guide mailing list