scap-security-guide v0.1-10 released -- now with JBossEAP5!

Shawn Wells shawn at redhat.com
Sat Feb 16 01:48:34 UTC 2013


Friends,

     A rebase of the scap-security-guide RPM was *long* overdue! Please 
see the "Consume" section of the project wiki for download information:
https://fedorahosted.org/scap-security-guide/

     Highlights of SSG v0.1-10 include:
- JBossEAP5 content! Utilizing content from the SCAP Security Guide 
project, on 29-JAN-2013 Red Hat corporately submitted paperwork to DISA 
FSO to begin the JBossEAP5 STIG process. SSG v0.1-10 reflects the OCIL, 
OVAL, and XCCDF content of this submission. Please refer to 
/usr/share/xml/scap/ssg/guide/JBossEAP5_Guide.html for details. We look 
forward to your feedback via the SSG mailing list! [1]

- `man scap-security-guide` now provides sample usage of the content.

- Several bugfixes relating to OVAL content. Many thanks to Brian 
Millet, Kenneth Stailey, Logan Rodrian, and all other members of the SSG 
community for the reports and patches!

- The RHEL6 STIG profile was renamed "stig-rhel6-server"

- A RHEL6 checklist has been included 
(/usr/share/xml/scap/ssg/guidestig-rhel6-server-guide.html). This 
outlines what specific rules are currently part of the profile.

- A number of updates against NIST 800-53 mappings has been completed. 
Please see files under /usr/share/xml/scap/ssg/policytables/.



[1] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide


More information about the scap-security-guide mailing list