How to evaluate server against final DISA STIG?
Andrew Gilmore
agilmore2 at gmail.com
Thu Jul 18 16:57:13 UTC 2013
I appreciate all the great work folks have done, and somehow missed
the big announcement that DISA had put a final out there.
Now, I'd like to evaluate against the final STIG, from
http://iase.disa.mil/stigs/os/unix/red_hat.html.
It appears that the profiles listed are fairly different than the SSG
version, but I can get behind that. I can try MAC-3_Public to start.
What I don't see is the CPE dictionary, etc. Where do I get evaluation
content to match the DISA STIG?
Thanks,
Andrew
More information about the scap-security-guide
mailing list