[PATCH 0/4] Apply David Smith's NIST SP 800-53 reference updates to RHEL7 content
Shawn Wells
shawn at redhat.com
Mon Jul 28 04:02:50 UTC 2014
On 7/25/14, 10:29 PM, Kayse, Josh wrote:
> On Jul 24, 2014, at 1:06 PM, JENNINGS, JARED L CTR USAF AFMC 96 SK/CCI<jared.jennings.ctr at us.af.mil> wrote:
>
>> >These are David Smith's changes emailed to the scap-security-guide list on Thu
>> >Jul 17 18:21:29 UTC 2014, but applied to the RHEL/7 directory. Also I found a
>> >typo and fixed it both in RHEL/6 and RHEL/7.
>> >
>> >I'm attempting to send these patches using Outlook. This may fail.
>> >
>> >Jared Jennings (4):
>> > correct punctuation error in NIST SP800-53 reference
>> > updated transforms to reflect 800-53 rev4
>> > updated 800-53 control references (services)
>> > updated 800-53 control references (system)
>> >
>> >RHEL/6/input/system/auditing.xml | 2 +-
>> >RHEL/7/input/services/base.xml | 18 ++++----
>> >RHEL/7/input/services/obsolete.xml | 28 +++++++-------
>> >RHEL/7/input/services/ssh.xml | 4 +-
>> >RHEL/7/input/system/auditing.xml | 58 ++++++++++++++--------------
>> >RHEL/7/input/system/network/ipsec.xml | 2 +-
>> >RHEL/7/input/system/network/kernel.xml | 2 +-
>> >RHEL/7/input/system/network/wireless.xml | 8 ++--
>> >RHEL/7/input/system/software/integrity.xml | 12 +++---
>> >RHEL/7/transforms/constants.xslt | 2 +-
>> >RHEL/7/transforms/xccdf2html.xslt | 4 +-
>> >11 files changed, 70 insertions(+), 70 deletions(-)
>> >
>> >--
>> >SCAP Security Guide mailing list
>> >scap-security-guide at lists.fedorahosted.org
>> >https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> >https://github.com/OpenSCAP/scap-security-guide/
> Any recommendations on maintaining the previous control mappings? My organization is stuck using a policy based on NIST 800-53 Rev 3.
Right now the name-pair is nist="xxx".... we could change to something
like 80053v3="xxx", 80053v4="xxx" if there is enough interest (read:
someone cares enough to code the old references back in)
More information about the scap-security-guide
mailing list