scap-security-guide January 2012

scap-security-guide@lists.fedorahosted.org

2 participants
4 discussions

NIST requirement mapping question
by Joe Nall 06 Feb '12

06 Feb '12

Has any work been done to be able to say what checks are mapped to a single NIST control? For example: AC-3: userowner_shadow_file groupowner_shadow_file groupowner_group_file ... IIUC, the current tools generate something more akin to userowner_shadow_file: AC-3, CM-6 where AC-3 and CM-6 are in the same nist ref joe

2 2

[PATCH] Add -f to rm so that make clean doesn't fail if pdf files are missing
by Joe Nall 30 Jan '12

30 Jan '12

--- rhel6/src/Makefile | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/rhel6/src/Makefile b/rhel6/src/Makefile index 49ce4ea..11fe48c 100644 --- a/rhel6/src/Makefile +++ b/rhel6/src/Makefile @@ -57,4 +57,4 @@ eval-common: oscap xccdf eval --profile common --results /tmp/results-test.xml output/rhel6-xccdf-scap-security-guide.xml clean: - rm ${OUTDIR}/*.xml ${OUTDIR}/*.html ${OUTDIR}/*.pdf + rm -f ${OUTDIR}/*.xml ${OUTDIR}/*.html ${OUTDIR}/*.pdf -- 1.7.1

1 0

DCID 6/3
by Joe Nall 26 Jan '12

26 Jan '12

I know DCID 6/3 is going away, but I would like to map the DCID requirements to the rules in the scap-security-guide. Questions: 1) Has this been done in a non-public repo since the source is FOUO? 2) Would it be acceptable to commit the DCID paragraph numbers to the git tree without any expository text? e.g. <ref dcid="1.1, 2.2, 3.3"/> joe

2 1

Determining whether a control has been completely implemented
by Joe Nall 26 Jan '12

26 Jan '12

The approach taken in the scap-security-guide seems to be to map low level actions back to high level controls. How do I determine if the set of actions completely or only partially satisfies the control? joe

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

scap-security-guide January 2012