<div dir="ltr">The VA has adopted the DISA STIG and CentOS has been approved for development servers. I think there are enclave requirements, nevertheless, it can be used.<div><br></div><div>Mike<br><div class="gmail_extra">
<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Date: Thu, 22 May 2014 17:06:32 -0400<br>
From: Shawn Wells <<a href="mailto:shawn@redhat.com">shawn@redhat.com</a>><br>
To: SCAP Security Guide <<a href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a>><br>
Subject: Re: Scap for Centos<br>
Message-ID: <<a href="mailto:537E66D8.9040604@redhat.com">537E66D8.9040604@redhat.com</a>><br>
Content-Type: text/plain; charset=UTF-8; format=flowed<br>
<br>
<br>
On 5/22/14, 3:43 PM, Derek Warner wrote:<br>
> Any chance anyone is working on getting SCAP to work on CENTOS? I<br>
> would love to use the scap security guide and secstate to validate<br>
> CENTOS 6.5. Right now its a manual process going line by line in the<br>
> RHEL 5 STIG. I would really love to find out if anyone has anything<br>
> automated that works on CENTOS.<br>
<br>
Given that CentOS isn't allowed on DoD networks, there is no STIG, no<br>
common criteria, no support, and doesn't meet any of the mandatory<br>
regulatory requirements, what's driving the need?<br>
<br>
<br></blockquote></div></div></div></div>