Cross-referencing CCE's and Remediation scripts

leam hall leamhall at gmail.com
Mon May 19 19:54:14 UTC 2014


Greg,

Okay, this is just cool. The one change I'd like to see, if you think it's
useful, is to sort on severity. When I was writing RHEL 6 Aqueduct scripts
I tried to focus on the Highs and Mediums. However, it is easy to miss one
here and there.

Thanks!

Leam



On Mon, May 19, 2014 at 3:44 PM, Greg Elin <gregelin at gitmachines.com> wrote:

> I've put together a web page to show which RHEL 6 CCE's have a remediation
> script from Aqueduct and SSG.
>
> It is interesting that a number of rules are missing CCE Idents. It is
> also easier to see the coverage of fix scripts.
>
> Http://www.govready.org/cce/fixes/
>
> Would love feedback and thoughts in how to improve coverage.
>
> Greg Elin
> P: 917-304-3488
> E:  gregelin at gitmachines.com
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>



-- 
Mind on a Mission <http://leamhall.blogspot.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140519/98c0c534/attachment.html>


More information about the scap-security-guide mailing list