On 7/25/14, 10:29 PM, Kayse, Josh wrote:

On Jul 24, 2014, at 1:06 PM, JENNINGS, JARED L CTR USAF AFMC 96 SK/CCIjared.jennings.ctr@us.af.mil wrote:

...

...

These are David Smith's changes emailed to the scap-security-guide list on Thu Jul 17 18:21:29 UTC 2014, but applied to the RHEL/7 directory. Also I found a typo and fixed it both in RHEL/6 and RHEL/7.

I'm attempting to send these patches using Outlook. This may fail.

Jared Jennings (4): correct punctuation error in NIST SP800-53 reference updated transforms to reflect 800-53 rev4 updated 800-53 control references (services) updated 800-53 control references (system)

RHEL/6/input/system/auditing.xml | 2 +- RHEL/7/input/services/base.xml | 18 ++++---- RHEL/7/input/services/obsolete.xml | 28 +++++++------- RHEL/7/input/services/ssh.xml | 4 +- RHEL/7/input/system/auditing.xml | 58 ++++++++++++++-------------- RHEL/7/input/system/network/ipsec.xml | 2 +- RHEL/7/input/system/network/kernel.xml | 2 +- RHEL/7/input/system/network/wireless.xml | 8 ++-- RHEL/7/input/system/software/integrity.xml | 12 +++--- RHEL/7/transforms/constants.xslt | 2 +- RHEL/7/transforms/xccdf2html.xslt | 4 +- 11 files changed, 70 insertions(+), 70 deletions(-)

-- SCAP Security Guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide https://github.com/OpenSCAP/scap-security-guide/

Any recommendations on maintaining the previous control mappings? My organization is stuck using a policy based on NIST 800-53 Rev 3.

Right now the name-pair is nist="xxx".... we could change to something like 80053v3="xxx", 80053v4="xxx" if there is enough interest (read: someone cares enough to code the old references back in)