Porting RHEL6 XCDDF Profiles to RHEL7

Gabe Alford redhatrises at gmail.com
Thu May 7 17:02:05 UTC 2015


Greg,

I don't think that it should be too much of a problem migrating the
profiles. See https://github.com/OpenSCAP/scap-security-guide/pull/550 for
an example.

Gabe

On Thu, May 7, 2015 at 10:42 AM, Greg Elin <gregelin at gitmachines.com> wrote:

> Fend and I are looking at moving a client from AWS Linux to RHEL7.
>
> We are trying to figure how we can help migrate the existing RHEL6 XCCDF
> profiles to RHEL7?
>
> A number of the baseline profiles available in RHEL6 package (e.g. USGCB
> and RHEL6-Server are not currently available in either the RHEL7 SSG
> package or the RHEL7 SSG built from source.
>
> I've skimmed the issues and the wiki pages and did not seen anything
> exactly on topic for the profiles.
>
> - Can these RHEL6 profiles easily be ported to RHEL7, or is it a big tasks
> b/c of significant changes between 6 and 7?
>
> - I'm treating the RHEL7 STIG as a separate baseline project from these
> other pre-existing RHEL6 baselines (with some overlap, of course). Is that
> right way or wrong way to think about it?
>
> - Does it make sense to put together a how to and/or coordination page to
> discuss the availability and porting of profiles? Fen and I would like to
> help, but want tackle the problem efficiently.
>
> - Is there an overall timeline or plan for managing the XCCDF profiles?
>
> Thanks.
>
> Greg
>
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20150507/ebdd2ebc/attachment.html>


More information about the scap-security-guide mailing list