SCAP Content Submission ...

Trey Henefield trey.henefield at ultra-ats.com
Thu Dec 4 17:45:40 UTC 2014


Greetings,

I have some content I would like to contribute to the SSG community.

The content is attached in a zip file and should be extracted directly into the repo.

The summary of these changes are as follows:


-          New content has been included to address DISA STIGs for:

o   Firefox

o   Java

o   Red Hat 5 (This content addresses the Red Hat 5 STIG requirements for Red Hat 5, Red Hat 4, CentOS 5, and CentOS 4)

o   Webmin

-          Modified shared/transforms/combinechecks.py to include an actual timestamp in the oval content when it gets created.

-          Added shared/transforms/stats.sh to display statistics when building content. The statistics identify the total number of requirements, as indicated in the stig_overlay.xml document for each STIG, the number of checks addressed by STIG requirements, and the number of fixes addressed by each STIG requirement. In addition, it also pulls in the DISA STIG information from the references folder (e.g. RHEL/5/references) and compares it with the STIG requirements in the stig_overlay.xml to support identifying differences (i.e. STIG requirements removed or added).

-          Added shared/transforms/stig_refs.sh to support pulling information (CCI, CCE, Severity, SVkey, SVrelease, IA controls, and title) from the DISA STIG and automatically populating that information into the SCAP content for consistency. There could probably be a better way to script this capability, but given the large number a requirements in the RHEL5 STIG, it was a great help. This capability is not called at build time, but on an as needed basis. When executed, it should be called from within the SCAP content directory (e.g. RHEL/5) and also requires the DISA STIG XCCDF file to be available in the references folder of the SCAP content directory (e.g. RHEL/5/references). Example: `cd RHEL/5; ../../shared/transforms/stig_refs.sh`

Happy SCAPing!

Best regards,

Trey Henefield, CISSP
Senior IAVA Engineer

Ultra Electronics
Advanced Tactical Systems, Inc.
4101 Smith School Road
Building IV, Suite 100
Austin, TX 78744 USA

Trey.Henefield at ultra-ats.com
Tel: +1 512 327 6795 ext. 647
Fax: +1 512 327 8043
Mobile: +1 512 541 6450

www.ultra-ats.com

Disclaimer
The information contained in this communication from trey.henefield at ultra-ats.com sent at 2014-12-04 12:46:15 is confidential and may be legally privileged.
It is intended solely for use by scap-security-guide at lists.fedorahosted.org and others authorized to receive it. If you are not scap-security-guide at lists.fedorahosted.org you are hereby notified that
any disclosure, copying, distribution or taking action in reliance of the contents of this information is strictly prohibited and may be unlawful.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141204/77867fdc/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: scap-security-guide.zip
Type: application/x-zip-compressed
Size: 1313199 bytes
Desc: scap-security-guide.zip
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141204/77867fdc/attachment-0001.bin>


More information about the scap-security-guide mailing list