<div dir="ltr">This is pretty accurate: <a href="http://www.corsec.com/fips-services/fips-federaldirectives/">http://www.corsec.com/fips-services/fips-federaldirectives/</a></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On Thu, May 22, 2014 at 9:00 PM, Spencer Shimko <span dir="ltr"><<a href="mailto:spencer@quarksecurity.com" target="_blank">spencer@quarksecurity.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">On Thu, May 22, 2014 at 5:06 PM, Shawn Wells <<a href="mailto:shawn@redhat.com">shawn@redhat.com</a>> wrote:<br>
><br>
> On 5/22/14, 3:43 PM, Derek Warner wrote:<br>
>><br>
>> Any chance anyone is working on getting SCAP to work on CENTOS? I would<br>
>> love to use the scap security guide and secstate to validate CENTOS 6.5.<br>
>> Right now its a manual process going line by line in the RHEL 5 STIG. I<br>
>> would really love to find out if anyone has anything automated that works on<br>
>> CENTOS.<br>
><br>
><br>
> Given that CentOS isn't allowed on DoD networks, there is no STIG, no common<br>
> criteria, no support, and doesn't meet any of the mandatory regulatory<br>
> requirements, what's driving the need?<br>
<br>
</div>I apologize as I replied elsewhere but should have read through the<br>
entire thread first.<br>
<br>
Shawn, what leads you to believe CentOS isn't allowed on DoD networks?<br>
The 8500.1 section 4.19 makes the contrary quite clear to me - CentOS<br>
(et al) are acceptable component in a solution when it comes to<br>
meeting a compelling operational requirement. Perhaps I'm<br>
misinterpreting that document though.<br>
<br>
Thanks,<br>
--Spencer<br>
<div class="HOEnZb"><div class="h5">_______________________________________________<br>
scap-security-guide mailing list<br>
<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Trevor Vaughan<br>Vice President, Onyx Point, Inc<br>(410) 541-6699<br><a href="mailto:tvaughan@onyxpoint.com">tvaughan@onyxpoint.com</a><br><br>-- This account not approved for unencrypted proprietary information --
</div>