I am looking to determine if there is a community project similar to OpenSCAP/SSG that applies to Oracle RDBMS STIG compliance? I have done some R&D on SSG for the Linux OS and have presented it internally at our Developer's conference with some positive feedback. Outside of the Linux OS, the next big tier is Oracle RDBMS.
Thanks Robert
Robert Hayden | Sr. Technology Architect | Cerner Corporation | 816.201.4068 | rhayden@cerner.commailto:rhayden@cerner.com | www.cerner.com
CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner Corporation and are intended only for the addressee. The information contained in this message is confidential and may constitute inside or non-public information under international, federal, or state securities laws. Unauthorized forwarding, printing, copying, distribution, or use of such information is strictly prohibited and may be unlawful. If you are not the addressee, please promptly delete this message and notify the sender of the delivery error by e-mail or you may call Cerner's corporate offices in Kansas City, Missouri, U.S.A at (+1) (816)221-1024.
On 6/24/14, 4:21 PM, Hayden,Robert wrote:
I am looking to determine if there is a community project similar to OpenSCAP/SSG that applies to Oracle RDBMS STIG compliance? I have done some R&D on SSG for the Linux OS and have presented it internally at our Developer's conference with some positive feedback. Outside of the Linux OS, the next big tier is Oracle RDBMS.
Not that I'm aware of. Happy to refer you (off-list) to some Oracle employees who deal with STIG implementations. I've no idea what their STIG plans are.
scap-security-guide@lists.fedorahosted.org