RHEL7 scanning (UNCLASSIFIED)

Shaw, Ray V CTR USARMY ARL (US) ray.v.shaw.ctr at mail.mil
Tue Jul 1 15:36:24 UTC 2014


Classification: UNCLASSIFIED
Caveats: NONE

Hope I'm not being a bother, but if possible, would someone mind weighing in
on this?  Scanning on RHEL7 isn't particularly useful right now, and we'd
like to lock it down as soon as possible.

Thanks,

--
Ray Shaw (Contractor, STG)
Army Research Laboratory
CIO, Unix Support


> -----Original Message-----
> From: Shaw, Ray V CTR USARMY ARL (US)
> Sent: Tuesday, June 24, 2014 10:31 AM
> To: 'SCAP Security Guide'
> Subject: RHEL7 scanning (UNCLASSIFIED)
> 
> Classification: UNCLASSIFIED
> Caveats: NONE
> 
> By default, it looks like only the partition checks are enabled when
> scanning with the stig-rhel7-server-upstream profile (on RHEL7).  If I
> edit
> the profile to enable all of the ones that RHEL6 has enabled (and then
> remove the few that don't exist for RHEL7), I get a total of 56 checks.
> 
> [If anyone is curious, out of the box it passes 35 and fails 21,
> assuming
> it's partitioned correctly.]
> 
> We're starting on RHEL7 to prepare our configuration management system,
> etc.
> for when 7 is blessed and we can deploy it, and of course STIGs are a
> big
> part of that.  Is it reasonable to expect that they will closely
> parallel
> the RHEL6 STIG?  Permissions/ownership, audit rules, sysctl, GDM, etc.
> 
> Thanks,
> 
> --
> Ray Shaw (Contractor, STG)
> Army Research Laboratory
> CIO, Unix Support
> 
> 
> 
> Classification: UNCLASSIFIED
> Caveats: NONE
> 


Classification: UNCLASSIFIED
Caveats: NONE


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5621 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140701/aa526001/attachment.bin>


More information about the scap-security-guide mailing list