How to evaluate server against final DISA STIG?

Andrew Gilmore agilmore2 at gmail.com
Thu Jul 18 16:57:13 UTC 2013


I appreciate all the great work folks have done, and somehow missed
the big announcement that DISA had put a final out there.

Now, I'd like to evaluate against the final STIG, from
http://iase.disa.mil/stigs/os/unix/red_hat.html.

It appears that the profiles listed are fairly different than the SSG
version, but I can get behind that. I can try MAC-3_Public to start.
What I don't see is the CPE dictionary, etc. Where do I get evaluation
content to match the DISA STIG?

Thanks,
Andrew


More information about the scap-security-guide mailing list