Re: scap-security-guide Digest, Vol 19, Issue 20

[Brian G. Maddox]

On 03/18/2013 08:00 AM, 
[e-mail] wrote:
> Message: 1
> Date: Sun, 17 Mar 2013 13:41:24 -0400
> From: Jeffrey Blank 
> To: "[e-mail]"
>    
> Subject: who uses CCE ids for RHEL guidance?
> Message-ID: 
> Content-Type: text/plain; charset=ISO-8859-1
>
> A question for the list:
>
> Who uses CCE identifiers (and for what)?
>
> I find them (informally) useful since they provide a unique identifier
> for a particular knob.  Of course, internal to the project, the XCCDF
> Rule id fulfills a similar role, though we'll have both.
>
> (I also have some reservations about CCE implementation and format, but
> those are not related to this inquiry, nor am I soliciting for those!)
>
> I'm simply curious about uses of CCE in RHEL security guidance,
> particularly that which would be derived from the project.
>
> Thanks!

The IA's I work with use CCE's for the things we put together for the 
USMC.  I end up copying and pasting the info for them just to make their 
lives easier.

--