Cross-referencing CCE's and Remediation scripts

leam hall leamhall at
Mon May 19 19:54:14 UTC 2014


Okay, this is just cool. The one change I'd like to see, if you think it's
useful, is to sort on severity. When I was writing RHEL 6 Aqueduct scripts
I tried to focus on the Highs and Mediums. However, it is easy to miss one
here and there.



On Mon, May 19, 2014 at 3:44 PM, Greg Elin <gregelin at> wrote:

> I've put together a web page to show which RHEL 6 CCE's have a remediation
> script from Aqueduct and SSG.
> It is interesting that a number of rules are missing CCE Idents. It is
> also easier to see the coverage of fix scripts.
> Http://
> Would love feedback and thoughts in how to improve coverage.
> Greg Elin
> P: 917-304-3488
> E:  gregelin at
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at

Mind on a Mission <>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the scap-security-guide mailing list