Insight into release timing of RHEL7 STIG as "official" -- any help needed on the Project?
Jeffrey Hawkins
rtswguru at hotmail.com
Wed Oct 7 17:50:31 UTC 2015
Thank you for your feedback...
Any particular areas where focus needs to be applied first for STIG, or just jump in ... :)?
Jeff
________________________________________
From: scap-security-guide-bounces at lists.fedorahosted.org <scap-security-guide-bounces at lists.fedorahosted.org> on behalf of Šimon Lukašík <isimluk at fedoraproject.org>
Sent: Wednesday, September 30, 2015 12:01 PM
To: SCAP Security Guide; open-scap-list at redhat.com
Subject: Re: Insight into release timing of RHEL7 STIG as "official" -- any help needed on the Project?
On 09/29/2015 05:49 PM, Jeffrey Hawkins wrote:
> Anyone have any insight on when the RHEL7 STIG is going to be ready for
> prime time to be picked up by DISA? I work for a company the delivers
> RHEL based Products that use the STIG as part of the Security Standards
> /Benchmark to follow, and right now we are middle of development cycle
> of migrating our Products from RHEL6 to RHEL7. We are leveraging
> existing RHEL6 STIG, and the early RHEL7 drafts where it make sense
> within our own Hardening Framework (developed and carried forward from
> pre-RHEL4 days). We would like to avoid what we faced with RHEL6 with
> chasing the Draft verses RHEL5 STIG, and speculating what would be in
> the final . So, thought I would raise a query of the Benchmark rollout...
>
>
> Are there areas where help is needed as I/we would be more than happy to
> help the Project?
>
Hello Jeff,
It is work in progress. All the development is taking place in
https://github.com/OpenSCAP/scap-security-guide/tree/master/RHEL/7
So far, the focus was on PCI-DSS. We understood PCI-DSS as a sub-set of
STIG (not precise, but close). PCI-DSS is close to be finished. So, the
focus will shift towards STIG upstream work.
We are more then welcome to any contribution!
Thanks!
--
Šimon Lukašík
Senior Software Engineer
Team Lead, Security Compliance, Red Hat, Inc.
--
SCAP Security Guide mailing list
scap-security-guide at lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/
More information about the scap-security-guide
mailing list