scap-security-guide November 2012

scap-security-guide@lists.fedorahosted.org

16 participants
35 discussions

Restructuring/Update of Trac
by Shawn Wells 25 Nov '12

25 Nov '12

Hey Guys, I had some time to go in and (finally!) restructure Trac, the Fedora Hosted provided ticketing system. In short: - Killed off stale milestones and reassigned open tickets to new ones which make sense. Note many items, such as CCE mappings, I'm considering a ticket of a milestone (vs a milestone itself). To my knowledge we cannot setup "sub milestones," so this approach seems best for now. Current OPEN milestones are below: * Remediation Content Synchronization (adding in TBD remediation scripts) * RHEL6 STIG - DISA InitialDraft Submission Feedback - Updated "Components" of the project, which allows users to place tickets against specific subsections. The updated list: * Build System * OVAL Content * Remediation Content * Tools * XCCDF Content - By default all new tickets will be owned by Michele Newman, who will screen them and pass along as appropriate. For those interested, here is a list of all open tickets by milestone: https://fedorahosted.org/scap-security-guide/report/3 -Shawn

2 1

Fwd: [Open-scap] openscap-0.9.2
by Shawn Wells 21 Nov '12

21 Nov '12

For those not on the open-scap tool mailing list -------- Original Message -------- Subject: [Open-scap] openscap-0.9.2 Date: Mon, 19 Nov 2012 16:13:28 +0100 From: Petr Lautrbach <plautrba(a)redhat.com> To: open-scap-list(a)redhat.com Hi all, a new OpenSCAP release is available - openscap-0.9.2. Changes: - rewritten the heuristic for pattern matching on path and filepath - CPE 2.3 language applicability testing - new ds_sds_index API providing a datastream overview - CPEs in source datastreams are automatically registered and used for XCCDF evaluation - --cpe option autodetects CPE dictionary and language - CVE support (validate feed, print CVEs) - introduced info module - made "$oscap xccdf generate custom" work again -> man page update - bug fixes Download: https://fedorahosted.org/releases/o/p/openscap/openscap-0.9.2.tar.gz SHA1: 4c1e6a2b612bc5d882889198a87b0df25b12317d Note: If you use RHEL-5 with libxml2-2.6.26-2, you won't be able to validate various XML content using XML schemas, see [1]. As a workaround, it's possible to build and use oscap with the version of libxml2 from RHEL-6 installed. [1] https://bugzilla.redhat.com/show_bug.cgi?id=877348 Petr -- Petr Lautrbach, Red Hat, Inc. http://cz.redhat.com _______________________________________________ Open-scap-list mailing list Open-scap-list(a)redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

2 1

odd copy editing requests
by Jeffrey Blank 21 Nov '12

21 Nov '12

(Trying to catch back up now.) Why are we changing colons to periods? If there are style requests that decrease readability (but are required for some peculiar reason), please try to macro these out so that at least some outputs look literate.

1 0

Only get (null) results when executing scap-security-guide-0.1-7
by Peter Gustafsson 19 Nov '12

19 Nov '12

Hi, I only get (null) result on almost all test when using scap-security-guide-0.1-6 or scap-security-guide-0.1-7. I'm executing the test on a rhel 6.3 box having below version of openscap installed: openscap-utils-0.8.0-2.el6.x86_64 openscap-0.8.0-2.el6.x86_64 # oscap xccdf eval --profile server /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml Rule ID: partition_for_tmp Title: Ensure /tmp Located On Separate Partition Result: (null) Rule ID: partition_for_var Title: Ensure /var Located On Separate Partition Result: (null) Rule ID: partition_for_var_log Title: Ensure /var/log Located On Separate Partition Result: (null) Rule ID: partition_for_var_log_audit Title: Ensure /var/log/audit Located On Separate Partition Result: (null) Rule ID: partition_for_home Title: Ensure /home Located On Separate Partition Result: (null) ...... Br, Peter Gustafsson

5 5

[PATCH 13/13] DISA FSO provided copy editing of RHEL6/input/services/obsolete.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 12/13] DISA FSO copy editing of RHEL6/input/services/ntp.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 11/13] DISA FSO provided copy editing of RHEL6/input/services/nfs.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 10/13] DISA FSO copy editing of RHEL6/input/services/mail.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 09/13] DISA FSO provided copy editing of RHEL6/input/services/ldap.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

[PATCH 08/13] DISA FSO provided copy editing of RHEL6/input/services/imap.xml
by Shawn Wells 16 Nov '12

16 Nov '12

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide November 2012