[PATCH 0/4] Apply David Smith's NIST SP 800-53 reference updates to RHEL7 content

Shawn Wells shawn at redhat.com
Mon Jul 28 04:02:50 UTC 2014


On 7/25/14, 10:29 PM, Kayse, Josh wrote:
> On Jul 24, 2014, at 1:06 PM, JENNINGS, JARED L CTR USAF AFMC 96 SK/CCI<jared.jennings.ctr at us.af.mil>  wrote:
>
>> >These are David Smith's changes emailed to the scap-security-guide list on Thu
>> >Jul 17 18:21:29 UTC 2014, but applied to the RHEL/7 directory. Also I found a
>> >typo and fixed it both in RHEL/6 and RHEL/7.
>> >
>> >I'm attempting to send these patches using Outlook. This may fail.
>> >
>> >Jared Jennings (4):
>> >  correct punctuation error in NIST SP800-53 reference
>> >  updated transforms to reflect 800-53 rev4
>> >  updated 800-53 control references (services)
>> >  updated 800-53 control references (system)
>> >
>> >RHEL/6/input/system/auditing.xml           |    2 +-
>> >RHEL/7/input/services/base.xml             |   18 ++++----
>> >RHEL/7/input/services/obsolete.xml         |   28 +++++++-------
>> >RHEL/7/input/services/ssh.xml              |    4 +-
>> >RHEL/7/input/system/auditing.xml           |   58 ++++++++++++++--------------
>> >RHEL/7/input/system/network/ipsec.xml      |    2 +-
>> >RHEL/7/input/system/network/kernel.xml     |    2 +-
>> >RHEL/7/input/system/network/wireless.xml   |    8 ++--
>> >RHEL/7/input/system/software/integrity.xml |   12 +++---
>> >RHEL/7/transforms/constants.xslt           |    2 +-
>> >RHEL/7/transforms/xccdf2html.xslt          |    4 +-
>> >11 files changed, 70 insertions(+), 70 deletions(-)
>> >
>> >-- 
>> >SCAP Security Guide mailing list
>> >scap-security-guide at lists.fedorahosted.org
>> >https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> >https://github.com/OpenSCAP/scap-security-guide/
> Any recommendations on maintaining the previous control mappings?  My organization is stuck using a policy based on NIST 800-53 Rev 3.

Right now the name-pair is nist="xxx".... we could change to something 
like 80053v3="xxx", 80053v4="xxx" if there is enough interest (read: 
someone cares enough to code the old references back in)


More information about the scap-security-guide mailing list