RHEL7 scanning (UNCLASSIFIED)
Shaw, Ray V CTR USARMY ARL (US)
ray.v.shaw.ctr at mail.mil
Tue Jul 1 15:36:24 UTC 2014
Classification: UNCLASSIFIED
Caveats: NONE
Hope I'm not being a bother, but if possible, would someone mind weighing in
on this? Scanning on RHEL7 isn't particularly useful right now, and we'd
like to lock it down as soon as possible.
Thanks,
--
Ray Shaw (Contractor, STG)
Army Research Laboratory
CIO, Unix Support
> -----Original Message-----
> From: Shaw, Ray V CTR USARMY ARL (US)
> Sent: Tuesday, June 24, 2014 10:31 AM
> To: 'SCAP Security Guide'
> Subject: RHEL7 scanning (UNCLASSIFIED)
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
> By default, it looks like only the partition checks are enabled when
> scanning with the stig-rhel7-server-upstream profile (on RHEL7). If I
> edit
> the profile to enable all of the ones that RHEL6 has enabled (and then
> remove the few that don't exist for RHEL7), I get a total of 56 checks.
>
> [If anyone is curious, out of the box it passes 35 and fails 21,
> assuming
> it's partitioned correctly.]
>
> We're starting on RHEL7 to prepare our configuration management system,
> etc.
> for when 7 is blessed and we can deploy it, and of course STIGs are a
> big
> part of that. Is it reasonable to expect that they will closely
> parallel
> the RHEL6 STIG? Permissions/ownership, audit rules, sysctl, GDM, etc.
>
> Thanks,
>
> --
> Ray Shaw (Contractor, STG)
> Army Research Laboratory
> CIO, Unix Support
>
>
>
> Classification: UNCLASSIFIED
> Caveats: NONE
>
Classification: UNCLASSIFIED
Caveats: NONE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5621 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140701/aa526001/attachment.bin>
More information about the scap-security-guide
mailing list