scap-security-guide March 2016

scap-security-guide@lists.fedorahosted.org

10 participants
6 discussions

Potential SELinux inclusion in RHEL7 STIG
by Mackanick, Jason W CIV DISA RE (US) 11 May '16

11 May '16

I am here with Shawn Wells today and we would like your help in developing the requirements for a possible inclusion of SELinux requirements to be included in the RHEL7 STIG. As we move away from legacy file permissions to type enforcement, we would like to work with the community to understand security relevant configuration options such as SELinux Booleans used in operational environments. To calm any fears associated with SELinux, we are only considering targeted policy and not the MLS enablement. Shawn will be working to gather your input. Any of your input would be appreciated if we could get it by Tuesday March 22, 2016 at the end of business.

10 17

OpenSCAP asking for your feedback
by Lenka Horakova 23 Mar '16

23 Mar '16

Hello everyone, OpenSCAP team is going to collect user feedback about SCAP Workbench GUI tool . If you are SCAP Workbench user, we would like to hear from you regarding your experiences with the product. If you are interested, please subscribe here: http://goo.gl/forms/kmb1OolUdR Once we receive your contact information, we will let you know about different feedback opportunities. Have a nice day everyone, Lenka Horáková Associate Software Engineer, UX Red Hat

1 0

How, in general, does XCCDF_POLICY engine correlate multi-platform "shared" rule with platform specific remediation? Is this specific to oscap datastreams?
by Mike Kuhnkey 09 Mar '16

09 Mar '16

Yes. Greatly! Red Hat responds to industry generated CCE's while DISA will eventually generate CCI's mapped to their current STIG release? Both SRG & CCI references appear to be falling from grace as far as providing stability for shared rule references (multi-platform from a Red Hat perspective),and ...we can only guess for DISA. I have an unrelated question to XCCDF_POLICY engine which I'll put in another thread. Thank you for clarification!

4 6

DISA STIG Release: What's purpose of "stig_refs.sh"?
by Mike Kuhnkey 09 Mar '16

09 Mar '16

Has someone checked out the script in DISA's STIG Release? ->U_Red_Hat_Enterprise_Linux_7_V1R0-1_Manual_STIG/Test/stig_refs.sh I find the instructions alarming on how to use the script. It is to be placed in the RHEL 5 folder (scap-security-guide project) and run..... ....am I off in left field here? What happens during make rhel7-dist -> content? Is this where/how the DRAFT was created?

4 4

Something less than a week left yet to register for SSG Contributor WorkShop #3
by Jan Lieskovsky 08 Mar '16

08 Mar '16

Hello folks, this is just a reminder there's still time to register for the upcoming SCAP Security Guide Contributor WorkShop #3: * When: Monday, March 14-th 10:00am - 12:00pm EDT * Topic: SSG content customization for Red Hat Satellite * Refs: - https://www.open-scap.org/ [1] - http://goo.gl/forms/p2jPy1kccl - https://github.com/OpenSCAP/scap-security-guide/wiki/SCAP-Security-Guide-Co… Looking forward to see you there && raise questions. -- Jan iankko Lieskovsky / Red Hat Security Technologies Team [1] I would like to use this opportunity to thank Lenka Horakova for creating the banner for this event on the open-scap.org portal page

1 0

STIG_Overlay.sh: rhel6->rhel7...Any recommendations on How to contribute?
by Mike Kuhnkey 29 Feb '16

29 Feb '16

stig_overlay.sh of rhel6 appears to be same for rhel7. When completed what will rhel7 stig_overlay look like when rhel6 references are replaced? Should I be talking with DISA FSO or have I missed something in the Wiki or blogs? DISA RHEL-7 Draft STIG references to "SRG-OS-000001-GPOS-00001" are new to me...Is this a new form of unified references? Somehow cross-referenced to "CCI"? I need some guidance here, or is it still being sorted out? I really don't know how to phrase this question intelligently....can someone help me out?

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide March 2016