who uses CCE ids for RHEL guidance?

Shawn Wells shawn at redhat.com
Mon Mar 25 03:29:05 UTC 2013


On 3/17/13 1:41 PM, Jeffrey Blank wrote:
> A question for the list:
>
> Who uses CCE identifiers (and for what)?
>
> I find them (informally) useful since they provide a unique identifier
> for a particular knob.  Of course, internal to the project, the XCCDF
> Rule id fulfills a similar role, though we'll have both.
>
> (I also have some reservations about CCE implementation and format, but
> those are not related to this inquiry, nor am I soliciting for those!)
>
> I'm simply curious about uses of CCE in RHEL security guidance,
> particularly that which would be derived from the project.


Personally I never use them, or even talk about them. When going through 
compliance processes I've found C&A stakeholders want to know about 
/their/ requirement, e.g. OS SRG or NIST 800-53 reference.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130324/e2a97fcb/attachment.html>


More information about the scap-security-guide mailing list