Audit .rule files location

[Greg Elin]

Shawn,

You indicated that the .rule files are available as part of SSG? Can you
please remind me where these are located?

Thanks.

Greg Elin
http://govready.org - Making FISMA compliance easier for innovators

email: [e-mail]
phone: [phone]

[Shawn Wells]

They're shipped natively in the OS for STIG, LSPP, and a few others.

Location:
/usr/share/doc/audit-*/stig.rules

--
Shawn Wells
Director, Innovation Programs
[e-mail] | 443.534.0130
@shawndwells
> On Sep 1, 2014, at 1:56 PM, Greg Elin  wrote:
>
> Shawn,
>
> You indicated that the .rule files are available as part of SSG? Can you please remind me where these are located?
>
> Thanks.
>
> Greg Elin
> http://govready.org - Making FISMA compliance easier for innovators
>
> email: [e-mail]
> phone: [phone]
>
> -- 
> SCAP Security Guide mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/

[Greg Elin]

Cool.

What are thoughts regarding documenting in OpenSCAP or SSG the existence of
these files?

I know after the fix script runs in the current RPM, there are still many
fails with audit-related rules.

What about including templates with various rule files in SCAP? I'm happy
to prepare the pull request...

Greg

On Mon, Sep 1, 2014 at 2:14 PM, Shawn Wells  wrote:
> They're shipped natively in the OS for STIG, LSPP, and a few others.
>
> Location:
> /usr/share/doc/audit-*/stig.rules
>
> --
> Shawn Wells
> Director, Innovation Programs
> [e-mail] | 443.534.0130
> @shawndwells
>
> On Sep 1, 2014, at 1:56 PM, Greg Elin  wrote:
>
> Shawn,
>
> You indicated that the .rule files are available as part of SSG? Can you
> please remind me where these are located?
>
> Thanks.
>
> Greg Elin
> http://govready.org - Making FISMA compliance easier for innovators
>
> email: [e-mail]
> phone: [phone]
>
> --
> SCAP Security Guide mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>
> --
> SCAP Security Guide mailing list
> [e-mail]
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/

[Shawn Wells]

On 9/2/14, 8:19 AM, Greg Elin wrote:
> Cool.
>
> What are thoughts regarding documenting in OpenSCAP or SSG the
> existence of these files?
>
> I know after the fix script runs in the current RPM, there are still
> many fails with audit-related rules.
>
> What about including templates with various rule files in SCAP? I'm
> happy to prepare the pull request...

Sure. Makes sense to put a mention in the top-level audit group.