Insight into release timing of RHEL7 STIG as "official" -- any help needed on the Project?

Jeffrey Hawkins rtswguru at hotmail.com
Wed Oct 7 17:50:31 UTC 2015


Thank you for your feedback...
 
Any particular areas where focus needs to be applied first for STIG, or just jump in ... :)?


Jeff





________________________________________
From: scap-security-guide-bounces at lists.fedorahosted.org <scap-security-guide-bounces at lists.fedorahosted.org> on behalf of Šimon Lukašík <isimluk at fedoraproject.org>
Sent: Wednesday, September 30, 2015 12:01 PM
To: SCAP Security Guide; open-scap-list at redhat.com
Subject: Re: Insight into release timing of RHEL7 STIG as "official" -- any     help needed on the Project?

On 09/29/2015 05:49 PM, Jeffrey Hawkins wrote:
> Anyone have any insight on when the RHEL7 STIG is going to be ready for
> prime time to be picked up by DISA?   I work for a company the delivers
> RHEL based Products that use the STIG as part of the Security Standards
> /Benchmark to follow, and right now we are middle of development cycle
> of migrating our Products from RHEL6 to RHEL7.  We are leveraging
> existing RHEL6 STIG, and the early RHEL7 drafts where it make sense
> within our own Hardening Framework (developed and carried forward from
> pre-RHEL4 days).   We would like to avoid what we faced with RHEL6 with
> chasing the Draft verses RHEL5 STIG, and speculating what would be in
> the final .   So, thought I would raise a query of the Benchmark rollout...
>
>
> Are there areas where help is needed as I/we would be more than happy to
> help the Project?
>

Hello Jeff,

It is work in progress. All the development is taking place in

     https://github.com/OpenSCAP/scap-security-guide/tree/master/RHEL/7

So far, the focus was on PCI-DSS. We understood PCI-DSS as a sub-set of
STIG (not precise, but close). PCI-DSS is close to be finished. So, the
focus will shift towards STIG upstream work.

We are more then welcome to any contribution!

Thanks!
--
Šimon Lukašík
Senior Software Engineer
Team Lead, Security Compliance, Red Hat, Inc.

--
SCAP Security Guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/


More information about the scap-security-guide mailing list