I cannot really talk much about CC and FIPS, but the STIG is expected to be published by DISA (based on the draft STIG content on RHEL 8.2 and 8.3) sometime early next year.
DISA may be able to provide a more concise timeframe. ( disa.stig_spt@mail.mil).
R/
Ted Brunell
On Wed, Dec 2, 2020 at 12:14 PM Hayden,Robert RHAYDEN@cerner.com wrote:
Curious on if anyone has any information on the next draft release from DISA on RHEL 8 STIG benchmarks? The one in May was pretty rough and did not really match where the current upstream was moving towards.
Thanks in advance
Robert
*Robert Hayden* | Lead Technology Architect | Cerner Corporation
CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner Corporation and are intended only for the addressee. The information contained in this message is confidential and may constitute inside or non-public information under international, federal, or state securities laws. Unauthorized forwarding, printing, copying, distribution, or use of such information is strictly prohibited and may be unlawful. If you are not the addressee, please promptly delete this message and notify the sender of the delivery error by e-mail or you may call Cerner's corporate offices in Kansas City, Missouri, U.S.A at (+1) (816)221-1024. _______________________________________________ scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedor...
Hi all,
An update :
* RHEL 8 Common Criteria is in process and we expect to complete and announce in EARLY Q1 CY2021
* RHEL 8 FIPS is finishing now! Actually, two of our certs are in hand now for RHEL 8 with three more in the final stages (in Coordination state). We expect to push a press release when we have all of the module validation certificates completed.
Again, expect that we will announce more publicly when we have completed the certifications for each of these standards.
On 12/2/20 4:30 PM, Ted Brunell wrote:
I cannot really talk much about CC and FIPS, but the STIG is expected to be published by DISA (based on the draft STIG content on RHEL 8.2 and 8.3) sometime early next year.
DISA may be able to provide a more concise timeframe. (disa.stig_spt@mail.mil mailto:disa.stig_spt@mail.mil).
R/
Ted Brunell
On Wed, Dec 2, 2020 at 12:14 PM Hayden,Robert <RHAYDEN@cerner.com mailto:RHAYDEN@cerner.com> wrote:
Curious on if anyone has any information on the next draft release from DISA on RHEL 8 STIG benchmarks? The one in May was pretty rough and did not really match where the current upstream was moving towards. Thanks in advance Robert *Robert Hayden*| Lead Technology Architect | Cerner Corporation CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner Corporation and are intended only for the addressee. The information contained in this message is confidential and may constitute inside or non-public information under international, federal, or state securities laws. Unauthorized forwarding, printing, copying, distribution, or use of such information is strictly prohibited and may be unlawful. If you are not the addressee, please promptly delete this message and notify the sender of the delivery error by e-mail or you may call Cerner's corporate offices in Kansas City, Missouri, U.S.A at (+1) (816)221-1024. _______________________________________________ scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org <mailto:scap-security-guide@lists.fedorahosted.org> To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org <mailto:scap-security-guide-leave@lists.fedorahosted.org> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ <https://docs.fedoraproject.org/en-US/project/code-of-conduct/> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines <https://fedoraproject.org/wiki/Mailing_list_guidelines> List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedorahosted.org <https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedorahosted.org>
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedor...
Hi Mark,
Related topic....
Do you know if the FIPS Software Modules/Libraries that RedHat certifies RHEL8.x will be included in CENTOS Stream (similar to existing CENTOS approach), or will CENTOS Stream have different Crypto Software? Also, any nuances or strategy changes we may need to be aware of as to OpenScap and Benchmarks for CENTOS Stream?
Jeff
________________________________ From: Mark Thacker mthacker@redhat.com Sent: Sunday, December 27, 2020 8:05 AM To: SCAP Security Guide scap-security-guide@lists.fedorahosted.org; Ted Brunell tbrunell@redhat.com Subject: Re: Any rumors on next draft for RHEL 8 STIG from DISA?
Hi all,
An update :
* RHEL 8 Common Criteria is in process and we expect to complete and announce in EARLY Q1 CY2021
* RHEL 8 FIPS is finishing now! Actually, two of our certs are in hand now for RHEL 8 with three more in the final stages (in Coordination state). We expect to push a press release when we have all of the module validation certificates completed.
Again, expect that we will announce more publicly when we have completed the certifications for each of these standards.
On 12/2/20 4:30 PM, Ted Brunell wrote: I cannot really talk much about CC and FIPS, but the STIG is expected to be published by DISA (based on the draft STIG content on RHEL 8.2 and 8.3) sometime early next year.
DISA may be able to provide a more concise timeframe. (disa.stig_spt@mail.milmailto:disa.stig_spt@mail.mil).
R/
Ted Brunell
On Wed, Dec 2, 2020 at 12:14 PM Hayden,Robert <RHAYDEN@cerner.commailto:RHAYDEN@cerner.com> wrote:
Curious on if anyone has any information on the next draft release from DISA on RHEL 8 STIG benchmarks? The one in May was pretty rough and did not really match where the current upstream was moving towards.
Thanks in advance
Robert
Robert Hayden | Lead Technology Architect | Cerner Corporation
CONFIDENTIALITY NOTICE This message and any included attachments are from Cerner Corporation and are intended only for the addressee. The information contained in this message is confidential and may constitute inside or non-public information under international, federal, or state securities laws. Unauthorized forwarding, printing, copying, distribution, or use of such information is strictly prohibited and may be unlawful. If you are not the addressee, please promptly delete this message and notify the sender of the delivery error by e-mail or you may call Cerner's corporate offices in Kansas City, Missouri, U.S.A at (+1) (816)221-1024.
_______________________________________________ scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.orgmailto:scap-security-guide@lists.fedorahosted.org To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.orgmailto:scap-security-guide-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedor...
_______________________________________________ scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.orgmailto:scap-security-guide@lists.fedorahosted.org To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.orgmailto:scap-security-guide-leave@lists.fedorahosted.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/scap-security-guide@lists.fedor...
--
Mark Thacker
He/Him
Team Lead & Security Experience Product Manager, Red Hat Enterprise Linux
Red Hat https://www.redhat.com
mthacker@redhat.commailto:mthacker@redhat.com M: +1-214-636-7004tel:+1-214-636-7004 Twitter / IRC: @thackman
[https://marketing-outfit-prod-images.s3-us-west-2.amazonaws.com/f5445ae0c9dd...]https://www.redhat.com
scap-security-guide@lists.fedorahosted.org
-
Jeffrey Hawkins -
Mark Thacker -
Ted Brunell