[PATCH 0/4] Remediation Templates

Jeffrey Blank blank at eclipse.ncsc.mil
Sat Jun 1 22:52:47 UTC 2013


Yes, but please hold off on remediation content until the OVAL validates
per the schematron, and there is a means of handling parameters/variables
in fix content.  If you don't eat your meat, you can't have any pudding.
 But we should be able to have both.

Subscribers will note that while they got their STIG, there is no automated
checking content for it.  But it is very close.

Please see the output from "make validate" for schematron validation
problems.

Also, how many have run the automated scans per:
https://fedorahosted.org/scap-security-guide/wiki/usageguide

Do the OVAL checks which are executed here work?  Would you like to see
these in an automated STIG, as-is?  Or would some QA first be nice?


On Sat, Jun 1, 2013 at 6:14 PM, Brian Millett <bmillett at gmail.com> wrote:

> On Sat, 1 Jun 2013 17:20:12 -0400
> Shawn Wells <shawn.d.wells at gmail.com> wrote:
>
> >
>
> Well, for me ACK.
>
> The hardest part of maintaining a bunch of remediation scrips is to make
> sure
> that the "fix" is consistant with the "check".  I've spent much time
> remediating my remediation.
>
> I like it.
>
> --
> Brian Millett
> "Orin Zento has powerful friends. By embarrassing him, you embarrassed
>     them. Today, you have made new enemies. If I were you, Commander, I
>     would watch things very carefully. You are not the most popular person
>     in government circles right now."
> 'So what else is new?'
>    -- [ Senator Hidoshi and Sinclair, "By Any Means Necessary"]
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130601/bea8f005/attachment.html>


More information about the scap-security-guide mailing list