BIND and HTTP STIGs

Gabe Alford redhatrises at gmail.com
Tue Mar 24 16:55:03 UTC 2015


On Fri, Mar 20, 2015 at 10:56 AM, Shawn Wells <shawn at redhat.com> wrote:

>
>
> On 3/20/15 9:23 AM, Gabe Alford wrote:
>
>> > Depends on how agnostic the content is.
>>
>> It would just be primarily for the RHEL/Fedora products and derivatives
>> i.e CentOS, etc.
>>
>
> Makes sense to drop into existing directories. Definitely looking forward
> to the patches!
>

So.... I keep going over this back and forth in my head, as the BIND and
HTTP would follow the Application and Web Server SRGs and not the OS SRG,
does it make sense to put the STIGs in the OS derivative directories, i.e.
RHEL/6,or somewhere else like maybe RHEL/apps and RHEL/webservers? Of
course if a person is using RHEL, it would be reasonable to assume that
that individual is using the HTTP and BIND versions officially supported
with the OS version, so maybe it does make sense to go under RHEL/6 for
example?

Gabe


> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20150324/d5cad1df/attachment.html>


More information about the scap-security-guide mailing list