19-MAY DISA RHEL6 STIG rebase
Cook, Melanie Richardson
melanie.cook at nist.gov
Wed May 21 15:10:35 UTC 2014
Do you know if there are plans to submit the Red Hat Enterprise Linux 6 update to the National Checklist Program (NCP)? It appears the version on the NCP is from July 2013.
SCAP Validation Program Manager
NIST | Information Technology Laboratory | Computer Security Division | SCAP Validation Program
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Shawn Wells
Sent: Monday, May 19, 2014 10:49 PM
Subject: 19-MAY DISA RHEL6 STIG rebase
This morning DISA FSO released an update against the Red Hat Enterprise Linux 6 STIG.
- Clarifying language on contentious requirements;
- For customers performing manual system verification, there's been a focus on properly documenting pass/fail tests;
- A few dozen bug fixes;
- Now includes OVAL automation;
- Release notes clearly indicate SSG as upstream consensus content! :)
Official content can be found on the DISA FSO website:
I put a note out on social media for those (like myself) who didn't receive FSO's EMail. Feel free to help pass the word!
scap-security-guide mailing list
scap-security-guide at lists.fedorahosted.org
More information about the scap-security-guide