List overview
Download

scap-security-guide February 2012

scap-security-guide@lists.fedorahosted.org

6 participants
42 discussions

Start a nNew thread

[1/1] 0001-22-FEB-2012-shawn-redhat.com.patch
by Shawn Wells 22 Feb '12

22 Feb '12

Do we have a formal process before committing patches? I made a few updates to audit tonight, attached. I still need to link to CCEs, ICD, etc though.

1 1

NIST requirement mapping question
by Joe Nall 06 Feb '12

06 Feb '12

Has any work been done to be able to say what checks are mapped to a single NIST control? For example: AC-3: userowner_shadow_file groupowner_shadow_file groupowner_group_file ... IIUC, the current tools generate something more akin to userowner_shadow_file: AC-3, CM-6 where AC-3 and CM-6 are in the same nist ref joe

2 2