Hey, Frank. Sorry to see you go, but I hope to interact with you even more now that you're getting paid to do what I can tell you really enjoy.

Tom Albrecht III, CISSP-ISSEP, GPEN || Information Assurance Engineer || Lockheed Martin JAGUAR Security Solutions || 610-354-7424

From: scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap-security-guide-bounces@lists.fedorahosted.org] On Behalf Of fcaviggi@redhat.com Sent: Friday, September 20, 2013 1:06 PM To: scap-security-guide@lists.fedorahosted.org Subject: EXTERNAL: Frank Caviggia - Reporting for Duty (SCAP-SECURITY-GUIDE)

Hello,

I recently joined Red Hat as a consultant after eight years with Lockheed Martin where I supported customers in DoD, DOE, and IC as System Administrator/Engineer on Linux (particularly Red Hat), Solaris, and AIX. In the past, sharing code with Red Hat was rather difficult due to the legal requirements that Lockheed management placed on me (I felt like Indiana Jones at the end of Raiders of the Lost Ark - where my code was sent away to be reviewed by "Top Experts", after which it was filed away in a envelope and forgotten.)

I have a ton of scripting experience (particularly in BASH and Python) that I've used to create and integrate into hardening scripts that I've used at various customer sites. I'm looking forward to contributing this knowledge to the scap-security-guide, particularly in some of the remediation scripts and utilities that will help automate and prepare systems for C&A (DIACAP and ICD503 processes) required by our government customers.

If you have any questions, please feel free to reach out to me - my personal cell phone is (575) 496-1206 and my email is fcaviggi@redhat.com

I'm looking forward to writing some code and actually being able to have it make an impact on the project.

Regards,

Frank Caviggia Consultant Red Hat

On 9/20/13 1:06 PM, fcaviggi@redhat.com wrote:

Hello,

I recently joined Red Hat as a consultant after eight years with Lockheed Martin where I supported customers in DoD, DOE, and IC as System Administrator/Engineer on Linux (particularly Red Hat), Solaris, and AIX. In the past, sharing code with Red Hat was rather difficult due to the legal requirements that Lockheed management placed on me (I felt like Indiana Jones at the end of Raiders of the Lost Ark - where my code was sent away to be reviewed by "Top Experts", after which it was filed away in a envelope and forgotten.)

I have a ton of scripting experience (particularly in BASH and Python) that I've used to create and integrate into hardening scripts that I've used at various customer sites. I'm looking forward to contributing this knowledge to the scap-security-guide, particularly in some of the remediation scripts and utilities that will help automate and prepare systems for C&A (DIACAP and ICD503 processes) required by our government customers.

A (belated) welcome :) Definitely interested in your false positive findings -- and good call on finding the kernel module /bin/true vs /bin/false issue!