Re: [Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card

Shawn Wells Sent: Tuesday, June 25, 2019 10:09 AM To: open-scap-list@redhat.com Subject: Re: [Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card On 6/25/19 11:36 AM, Boucher, William wrote: I figured it out! That's great! To help others

[Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card

Hi Folks, I've got a machine running Scap Workbench on another remote/networked machine. Both are CentOS 7.5. I set up Workbench to SSH to the remote box as root (for now root ssh login is enabled on both machines), using CentOS 7 content. I selected DISA STIG for Red Hat Enterprise Linux 7.

[Open-scap] Using SCAP Workbench over a secure LAN with no internet connection

Hi folks, I'm using SCAP Workbench with Open SCAP to remediate CentOS 7.5 (actually RedHawk 7.5) systems to evaluate and apply the DISA STIG controls. My problem isn't in getting this to work, I'm networked to the system I am applying controls to and remediation and report generation works

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: Gary Gapinski [mailto:gapin...@nasa.gov] Sent: Monday, February 4, 2019 10:26 AM To: Boucher, William Cc: open-scap-list@redhat.com Subject: Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS I can look but if your oxygen will r

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

at.com] On Behalf Of Boucher, William Sent: Monday, February 4, 2019 9:04 AM To: Gary Gapinski Cc: open-scap-list@redhat.com Subject: Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS Gary, Similar results with Ububtu 16.04. Not all results were notapplicable, score was given as 25%.

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

tes Corporation 4900 Lang Ave. NE, Suite 100 Albuquerque, NM 87109-9708 Phone: 505.245.9970 x166 Fax: 505.245.9971 Cell: 505.459.7620 william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: Gary Gapinski [mailto:gapin...@nasa.gov] Sent: Friday, January 25, 2019 9:50 AM To: Boucher, William

Re: [Open-scap] Ubuntu Security Guide content

Hi Todd and Jan, Please excuse me, I do not intend to hijack Jan's thread but I believe the following may be related enough to be helpful. These OpenSCAP CPE files exist on my system at /usr/local/share/openscap/cpe/, after compiling openscap from source on my machine. But neither they nor the

Re: [Open-scap] Hardening Redhawk 6.5

...@mza.com<mailto:william.bouc...@mza.com> From: open-scap-list-boun...@redhat.com [mailto:open-scap-list-boun...@redhat.com] On Behalf Of Shawn Wells Sent: Wednesday, January 30, 2019 2:16 AM To: open-scap-list@redhat.com Subject: Re: [Open-scap] Hardening Redhawk 6.5 On 1/29/19 11:14 PM, B

[Open-scap] Hardening Redhawk 6.5

Hi folks, I've been tasked with applying the RedHat 6 STIG to several RedHawk 6.5 systems. Running oscap should be relatively easy, to see where a base install sits initially (RedHawk is RedHat with modifications for embedded realtime use). The RedHawk site talks about testing RedHawk

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

...@mza.com> From: Newman, Stuart J. (GSFC-491.0)[KBRwyle] [mailto:stuart.j.new...@nasa.gov] Sent: Wednesday, November 28, 2018 4:19 AM To: Boucher, William ; open-scap-list@redhat.com Subject: RE: Benchmark for Canonical Ubuntu 16.04 LTS The current (0.1.41) version of the scap security

[Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

Hi folks, I am currently hardening an Ubuntu embedded system for delivery to a customer. I have downloaded the "Canonical Ubuntu 16.04 LTS STIG Ver 1, Rel 1" from DISA, and I have obtained a copy of the SCAP Compliance checker tool "SCC 5.0.2 Ubuntu 16 AMD64". What I am missing is an SCAP