Diego,

It looks like http://iase.disa.mil/stigs/ has been updated recently 
(today).

Right, we couldn't find any CCE lists that had mappings to the Linux
STIG references.  I guess we'll do some regex to figure out which
controls map from the cfengine STIG samples to the CCE table we have to
use.

Carolyn


On Fri, Jul 13, 2012 at 11:53:11AM -0500, Diego Zamboni wrote:
> Hi Carolyn,
> 
> I don't know of such a mapping, and couldn't find one in a quick search.
> 
> I suppose in principle it might be possible to generate it because CCE 
> includes references, but AFAICT, all STIG references it includes are to the 
> STIG for Windows 2003, I couldn't see any references to STIG for Unix.
> 
> BTW do you know where STIG is now? The old page at 
> http://iase.disa.mil/stigs/ seems to be gone.
> 
> --Diego
> 
> 
> On Jul 13, 2012, at 11:43 AM, Carolyn Rowland wrote:
> 
> > Community,
> > 
> > I don't suppose anyone has a mapping between the DISA STIG GEN numbers
> > referenced in the Cfengine stigs.cf stig_README.txt and the Mitre CCE
> > nubmers. 
> > 
> > My agency uses Mitre CCE reference numbers in it's configuration
> > requirements, not the Stig GEN00xxx numbers so we are having trouble
> > using the cfengine stig examples.
> > 
> > Thanks,
> > Carolyn
> > _______________________________________________
> > Help-cfengine mailing list
> > Help-cfengine@cfengine.org
> > https://cfengine.org/mailman/listinfo/help-cfengine
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to