<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
        {mso-style-priority:99;
        mso-style-link:"Balloon Text Char";
        margin:0in;
        margin-bottom:.0001pt;
        font-size:8.0pt;
        font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
        {mso-style-name:"Balloon Text Char";
        mso-style-priority:99;
        mso-style-link:"Balloon Text";
        font-family:"Tahoma","sans-serif";}
span.EmailStyle19
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Hi Leam,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>That’s a good question.  Something I would also like to know.  I am not as familiar with the Aqueduct project and certainly open to leveraging any and all remediation capabilities it offers.  My take on the SSG content as it relates to remediation is to hold the authoritative desired state.  Meaning XCCDF contains values for a fix tool for remediation.   The way I see it bash scripting is one way of doing this.  I’d like to see other methods such as puppet and alike to be able to use XCCDF as a source for fix values.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>It would be great to build on bash scripting and expand on to other methods.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>-ln<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap-security-guide-bounces@lists.fedorahosted.org] <b>On Behalf Of </b>leam hall<br><b>Sent:</b> Friday, December 13, 2013 8:10 AM<br><b>To:</b> scap-security-guide@lists.fedorahosted.org<br><b>Subject:</b> Re: SSG Kickoff: RHEL7 Content<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><o:p>&nbsp;</o:p></p><div><div><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'>What is SSG doing for script based remediation that Aqueduct isn't?<o:p></o:p></p></div><p class=MsoNormal style='margin-left:.5in'>Leam<o:p></o:p></p></div><div><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'><o:p>&nbsp;</o:p></p><div><p class=MsoNormal style='margin-left:.5in'>On Fri, Dec 13, 2013 at 7:27 AM, Nunez, Luis K &lt;<a href="mailto:lnunez@mitre.org" target="_blank">lnunez@mitre.org</a>&gt; wrote:<o:p></o:p></p><p class=MsoNormal style='margin-left:.5in'>Hi Shawn,<br>Can we also add to the agenda Remediation? &nbsp;I think this a good time to reflect on some of remediation content and capabilities with SSG moving forward.<br><br>Thanks.<br><br>-ln<br><br>-----Original Message-----<br>From: <a href="mailto:scap-security-guide-bounces@lists.fedorahosted.org">scap-security-guide-bounces@lists.fedorahosted.org</a> [mailto:<a href="mailto:scap-security-guide-bounces@lists.fedorahosted.org">scap-security-guide-bounces@lists.fedorahosted.org</a>] On Behalf Of Steve Grubb<br>Sent: Thursday, December 12, 2013 4:45 PM<br>To: <a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>Cc: Shawn Wells<br>Subject: Re: SSG Kickoff: RHEL7 Content<br><br>On Thursday, December 12, 2013 04:27:15 PM Shawn Wells wrote:<br>&gt; RHEL7 beta has been released, time to start on SSG content!<br>&gt;<br>&gt; Goals of this call:<br>&gt; - Quickly overview Red Hat's RHEL7 STIG intent<br>&gt; - Identify required steps to port SSG from RHEL6 -&gt; RHEL7<br>&gt; - Form initial work breakdown structure, assign &quot;task leads&quot;<br>&gt; - What OVAL standards will be needed? e.g. systemctl vs init, firewalld, etc<br>&gt; - RHEL6 STIG community feedback: What worked? What should be dropped?<br><br>Everyone please note...some standards work will be required to get final RHEL7<br>content. This is because the move to systemd will make runlevel_test obsolete.<br>These tests can be commented out until OVAL 5.11 is final.<br><br>-Steve<br>_______________________________________________<br>scap-security-guide mailing list<br><a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br><a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>_______________________________________________<br>scap-security-guide mailing list<br><a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br><a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><o:p></o:p></p></div><p class=MsoNormal style='margin-left:.5in'><br><br clear=all><br>-- <o:p></o:p></p><div><p class=MsoNormal style='margin-left:.5in'><a href="http://leamhall.blogspot.com/" target="_blank">Mind on a Mission</a><o:p></o:p></p></div></div></div></body></html>