Scap for Centos

Mike Johnson mikerjohnson at
Thu May 22 22:05:22 UTC 2014

The VA has adopted the DISA STIG and CentOS has been approved for
development servers.  I think there are enclave requirements, nevertheless,
it can be used.


> Date: Thu, 22 May 2014 17:06:32 -0400
> From: Shawn Wells <shawn at>
> To: SCAP Security Guide <scap-security-guide at>
> Subject: Re: Scap for Centos
> Message-ID: <537E66D8.9040604 at>
> Content-Type: text/plain; charset=UTF-8; format=flowed
> On 5/22/14, 3:43 PM, Derek Warner wrote:
> > Any chance anyone is working on getting SCAP to work on CENTOS? I
> > would love to use the scap security guide and secstate to validate
> > CENTOS 6.5. Right now its a manual process going line by line in the
> > RHEL 5 STIG. I would really love to find out if anyone has anything
> > automated that works on CENTOS.
> Given that CentOS isn't allowed on DoD networks, there is no STIG, no
> common criteria, no support, and doesn't meet any of the mandatory
> regulatory requirements, what's driving the need?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the scap-security-guide mailing list