Porting RHEL6 XCDDF Profiles to RHEL7

Greg Elin gregelin at gitmachines.com
Thu May 7 17:24:07 UTC 2015


Gabe,

Thanks. That is helpful. 

So it comes down to Knowledge of -- and testing by -- developer that RHEL6 test applies to RHEL7?

Greg Elin
P: 917-304-3488
E:  gregelin at gitmachines.com

Sent from my iPhone

> On May 7, 2015, at 1:02 PM, Gabe Alford <redhatrises at gmail.com> wrote:
> 
> Greg,
> 
> I don't think that it should be too much of a problem migrating the profiles. See https://github.com/OpenSCAP/scap-security-guide/pull/550 for an example.
> 
> Gabe
> 
>> On Thu, May 7, 2015 at 10:42 AM, Greg Elin <gregelin at gitmachines.com> wrote:
>> Fend and I are looking at moving a client from AWS Linux to RHEL7.
>> 
>> We are trying to figure how we can help migrate the existing RHEL6 XCCDF profiles to RHEL7?
>> 
>> A number of the baseline profiles available in RHEL6 package (e.g. USGCB and RHEL6-Server are not currently available in either the RHEL7 SSG package or the RHEL7 SSG built from source.
>> 
>> I've skimmed the issues and the wiki pages and did not seen anything exactly on topic for the profiles. 
>> 
>> - Can these RHEL6 profiles easily be ported to RHEL7, or is it a big tasks b/c of significant changes between 6 and 7?
>> 
>> - I'm treating the RHEL7 STIG as a separate baseline project from these other pre-existing RHEL6 baselines (with some overlap, of course). Is that right way or wrong way to think about it? 
>> 
>> - Does it make sense to put together a how to and/or coordination page to discuss the availability and porting of profiles? Fen and I would like to help, but want tackle the problem efficiently. 
>> 
>> - Is there an overall timeline or plan for managing the XCCDF profiles?
>> 
>> Thanks.
>> 
>> Greg
>> 
>> 
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
> 
> -- 
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20150507/c5990345/attachment-0001.html>


More information about the scap-security-guide mailing list