first post

Shawn Wells shawn at redhat.com
Fri Jul 25 21:30:26 UTC 2014


On 7/23/14, 12:54 PM, leam hall wrote:
> The actual RHEL 7 STIG, if it follows RHEL 6 timelines, will be out
> right before RHEL 8.

Hey hey now... ;)

I'm just returning from PTO, and will be presenting at the 30-JULY 
Defense in Depth event (http://defenseindepth2014.org)... so there's a 
bit of a hard deadline on establishing some sort of RHEL7 STIG schedule.

> To some degree you can use RHEL 5 and 6 as guidelines but they are no
> more official than a blind guess.

DISA FSO sent over the underlying (and recently updated) OS SRG 
requirements that RHEL 7 must meet:
http://people.redhat.com/swells/RHEL7_STIG_REQUIREMENTS.xlsx

There's significant overlap between these and the underlying RHEL6 STIG 
requirements, though we haven't sorted through them all yet. Many seem 
to not be applicable. It'll give interested parties a starting point though.

-shawn


More information about the scap-security-guide mailing list