EXT :19-MAY DISA RHEL6 STIG rebase
Marlow, Phillip J (IS)
Phillip.Marlow at ngc.com
Tue May 20 13:06:30 UTC 2014
Excellent! Thanks Shawn.
The README says:
The STIG_Benchmark files are packaged separately and are available through a PKI enabled link. They are for use with an SCAP tool for automated scanning and will only be included for technologies for which we currently have OVAL.
But I haven't been able to find the content. Is this available yet? If not, is there an ETA?
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Shawn Wells
Sent: Monday, May 19, 2014 10:49 PM
Subject: EXT :19-MAY DISA RHEL6 STIG rebase
This morning DISA FSO released an update against the Red Hat Enterprise Linux 6 STIG.
- Clarifying language on contentious requirements;
- For customers performing manual system verification, there's been a focus on properly documenting pass/fail tests;
- A few dozen bug fixes;
- Now includes OVAL automation;
- Release notes clearly indicate SSG as upstream consensus content! :)
Official content can be found on the DISA FSO website:
I put a note out on social media for those (like myself) who didn't receive FSO's EMail. Feel free to help pass the word!
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
More information about the scap-security-guide