first post
Shawn Wells
shawn at redhat.com
Fri Jul 25 21:30:26 UTC 2014
On 7/23/14, 12:54 PM, leam hall wrote:
> The actual RHEL 7 STIG, if it follows RHEL 6 timelines, will be out
> right before RHEL 8.
Hey hey now... ;)
I'm just returning from PTO, and will be presenting at the 30-JULY
Defense in Depth event (http://defenseindepth2014.org)... so there's a
bit of a hard deadline on establishing some sort of RHEL7 STIG schedule.
> To some degree you can use RHEL 5 and 6 as guidelines but they are no
> more official than a blind guess.
DISA FSO sent over the underlying (and recently updated) OS SRG
requirements that RHEL 7 must meet:
http://people.redhat.com/swells/RHEL7_STIG_REQUIREMENTS.xlsx
There's significant overlap between these and the underlying RHEL6 STIG
requirements, though we haven't sorted through them all yet. Many seem
to not be applicable. It'll give interested parties a starting point though.
-shawn
More information about the scap-security-guide
mailing list