Re: alternatives to STIG Viewer once Oracle JDK 8 / JavaFX 8 is EOL in January 2019?

[Trevor Vaughan]

Brent, that may be the funniest message I've ever read.

There isn't one, I just reverse engineered it from the pseudo-XML that it
outputs.

On Wed, Nov 28, 2018 at 9:42 AM Brent Kimberley 
wrote:
> Where can I find the controlled schema / ICD / metadata for the checklist
> file format?
>
> *From:* Trevor Vaughan [mailto:[e-mail]]
> *Sent:* Wednesday, November 28, 2018 9:02 AM
> *To:* SCAP Security Guide 
> *Subject:* Re: alternatives to STIG Viewer once Oracle JDK 8 / JavaFX 8
> is EOL in January 2019?
>
> Yep, this is the one.
>
> That said, if you dig through the archives of this mailing list, I figured
> out how to create the bare minimum .ckl file that you need for reporting so
> that should give people a head start.
>
> On Wed, Nov 28, 2018 at 1:31 AM Matthew  wrote:
>
> The .ckl issue is the answer to why use. I know not everyone works for
> gov't entities, but they typically require it, with very little options for
> other products. Management likes graphs and charts.
>
> On Tue, Nov 27, 2018, 8:22 PM James Cassell <[e-mail]
> wrote:
>
> On Tue, Nov 27, 2018, at 6:21 PM, Shawn Wells wrote:
> > On 11/27/18 2:06 PM, James Ralston wrote:
> > > I apologize if this is a little off-topic for this list, but a
> > > question: what are others who use STIG Viewer planning to do once
> > > Oracle JDK 8 / JavaFX go EOL in January 2019?
>
> [...]
> > > Ideally, I'd like to find a Linux replacement for STIG
> > > Viewer—something that can read, annotate, and write STIG Viewer
> > > checklist (*.ckl) files.  But although SCAP Workbench can load and
> > > check STIGs, unless I'm missing something, it has no support for STIG
> > > Viewer checklist files.
> >
> > Not being snide, should this come across wrongly.... genuine question:
> > Why use STIG Viewer in the first place?
>
> The STIG Viewer produces *.ckl checklist files, which some auditors and
> many security departments want.
>
> V/r,
> James Cassell
> _______________________________________________
> scap-security-guide mailing list --
> [e-mail]
> To unsubscribe send an email to
> [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>
> scap-security-guide mailing list --
> [e-mail]
> To unsubscribe send an email to
> [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...
>
> --
>
> Trevor Vaughan
> Vice President, Onyx Point, Inc
>
> [phone] x788
>
> -- This account not approved for unencrypted proprietary information --
> THIS MESSAGE IS FOR THE USE OF THE INTENDED RECIPIENT(S) ONLY AND MAY
> CONTAIN INFORMATION THAT IS PRIVILEGED, PROPRIETARY, CONFIDENTIAL, AND/OR
> EXEMPT FROM DISCLOSURE UNDER ANY RELEVANT PRIVACY LEGISLATION. No rights to
> any privilege have been waived. If you are not the intended recipient, you
> are hereby notified that any review, re-transmission, dissemination,
> distribution, copying, conversion to hard copy, taking of action in
> reliance on or other use of this communication is strictly prohibited. If
> you are not the intended recipient and have received this message in error,
> please notify me by return e-mail and delete or destroy all copies of this
> message.
> _______________________________________________
> scap-security-guide mailing list --
> [e-mail]
> To unsubscribe send an email to
> [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...

alternatives to STIG Viewer once Oracle JDK 8 / JavaFX 8 is EOL in January 2019?

[Brent Kimberley]

That speaks volumes.

http://www.crosstalkonline.org/back-issues/

From: Trevor Vaughan [mailto:[e-mail]]
Sent: Wednesday, November 28, 2018 11:31 AM
To: SCAP Security Guide 
Subject: Re: alternatives to STIG Viewer once Oracle JDK 8 / JavaFX 8 is EOL in January 2019?

Brent, that may be the funniest message I've ever read.

There isn't one, I just reverse engineered it from the pseudo-XML that it outputs.

On Wed, Nov 28, 2018 at 9:42 AM Brent Kimberley <[e-mail]> wrote:
Where can I find the controlled schema / ICD / metadata for the checklist file format?

From: Trevor Vaughan [mailto:[e-mail]]
Sent: Wednesday, November 28, 2018 9:02 AM
To: SCAP Security Guide <[e-mail]>
Subject: Re: alternatives to STIG Viewer once Oracle JDK 8 / JavaFX 8 is EOL in January 2019?

Yep, this is the one.

That said, if you dig through the archives of this mailing list, I figured out how to create the bare minimum .ckl file that you need for reporting so that should give people a head start.

On Wed, Nov 28, 2018 at 1:31 AM Matthew <[e-mail]> wrote:
The .ckl issue is the answer to why use. I know not everyone works for gov't entities, but they typically require it, with very little options for other products. Management likes graphs and charts.

On Tue, Nov 27, 2018, 8:22 PM James Cassell <[e-mail] wrote:
On Tue, Nov 27, 2018, at 6:21 PM, Shawn Wells wrote:
> On 11/27/18 2:06 PM, James Ralston wrote:
> > I apologize if this is a little off-topic for this list, but a
> > question: what are others who use STIG Viewer planning to do once
> > Oracle JDK 8 / JavaFX go EOL in January 2019?

[...]
> > Ideally, I'd like to find a Linux replacement for STIG
> > Viewer—something that can read, annotate, and write STIG Viewer
> > checklist (*.ckl) files.  But although SCAP Workbench can load and
> > check STIGs, unless I'm missing something, it has no support for STIG
> > Viewer checklist files.
>
> Not being snide, should this come across wrongly.... genuine question:
> Why use STIG Viewer in the first place?

The STIG Viewer produces *.ckl checklist files, which some auditors and many security departments want.

V/r,
James Cassell
_______________________________________________
scap-security-guide mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...
_______________________________________________
scap-security-guide mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...

--
Trevor Vaughan
Vice President, Onyx Point, Inc
[phone] x788

-- This account not approved for unencrypted proprietary information --
THIS MESSAGE IS FOR THE USE OF THE INTENDED RECIPIENT(S) ONLY AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, PROPRIETARY, CONFIDENTIAL, AND/OR EXEMPT FROM DISCLOSURE UNDER ANY RELEVANT PRIVACY LEGISLATION. No rights to any privilege have been waived. If you are not the intended recipient, you are hereby notified that any review, re-transmission, dissemination, distribution, copying, conversion to hard copy, taking of action in reliance on or other use of this communication is strictly prohibited. If you are not the intended recipient and have received this message in error, please notify me by return e-mail and delete or destroy all copies of this message.
_______________________________________________
scap-security-guide mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...

--
Trevor Vaughan
Vice President, Onyx Point, Inc
[phone] x788

-- This account not approved for unencrypted proprietary information --
THIS MESSAGE IS FOR THE USE OF THE INTENDED RECIPIENT(S) ONLY AND MAY CONTAIN INFORMATION THAT IS PRIVILEGED, PROPRIETARY, CONFIDENTIAL, AND/OR EXEMPT FROM DISCLOSURE UNDER ANY RELEVANT PRIVACY LEGISLATION. No rights to any privilege have been waived. If you are not the intended recipient, you are hereby notified that any review, re-transmission, dissemination, distribution, copying, conversion to hard copy, taking of action in reliance on or other use of this communication is strictly prohibited. If you are not the intended recipient and have received this message in error, please notify me by return e-mail and delete or destroy all copies of this message.