Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2019-01-21 Thread Boucher, William
x166 Fax: 505.245.9971 Cell: 505.459.7620 william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: Watson Sato [mailto:ws...@redhat.com] Sent: Monday, January 7, 2019 7:58 AM To: Boucher, William Cc: Newman, Stuart J. (GSFC-491.0)[KBRwyle] ; open-scap-list@redhat.com Subject: Re: [Ope

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2019-01-23 Thread Boucher, William
Embedded Systems Software Engineer Information Systems Security Manager MZA Associates Corporation 4900 Lang Ave. NE, Suite 100 Albuquerque, NM 87109-9708 Phone: 505.245.9970 x166 Fax: 505.245.9971 Cell: 505.459.7620 william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: Boucher, W

[Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2018-11-27 Thread Boucher, William
Hi folks, I am currently hardening an Ubuntu embedded system for delivery to a customer. I have downloaded the "Canonical Ubuntu 16.04 LTS STIG Ver 1, Rel 1" from DISA, and I have obtained a copy of the SCAP Compliance checker tool "SCC 5.0.2 Ubuntu 16 AMD64". What I am missing is an SCAP

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2018-11-28 Thread Boucher, William
...@mza.com> From: Newman, Stuart J. (GSFC-491.0)[KBRwyle] [mailto:stuart.j.new...@nasa.gov] Sent: Wednesday, November 28, 2018 4:19 AM To: Boucher, William ; open-scap-list@redhat.com Subject: RE: Benchmark for Canonical Ubuntu 16.04 LTS The current (0.1.41) version of the scap security

[Open-scap] Hardening Redhawk 6.5

2019-01-29 Thread Boucher, William
Hi folks, I've been tasked with applying the RedHat 6 STIG to several RedHawk 6.5 systems. Running oscap should be relatively easy, to see where a base install sits initially (RedHawk is RedHat with modifications for embedded realtime use). The RedHawk site talks about testing RedHawk

Re: [Open-scap] Hardening Redhawk 6.5

2019-01-30 Thread Boucher, William
...@mza.com<mailto:william.bouc...@mza.com> From: open-scap-list-boun...@redhat.com [mailto:open-scap-list-boun...@redhat.com] On Behalf Of Shawn Wells Sent: Wednesday, January 30, 2019 2:16 AM To: open-scap-list@redhat.com Subject: Re: [Open-scap] Hardening Redhawk 6.5 On 1/29/19 11:14 PM, B

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2019-02-04 Thread Boucher, William
william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: Gary Gapinski [mailto:gapin...@nasa.gov] Sent: Monday, February 4, 2019 10:26 AM To: Boucher, William Cc: open-scap-list@redhat.com Subject: Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS I can look but if your oxygen will r

Re: [Open-scap] Ubuntu Security Guide content

2019-02-04 Thread Boucher, William
Hi Todd and Jan, Please excuse me, I do not intend to hijack Jan's thread but I believe the following may be related enough to be helpful. These OpenSCAP CPE files exist on my system at /usr/local/share/openscap/cpe/, after compiling openscap from source on my machine. But neither they nor the

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2019-02-04 Thread Boucher, William
at.com] On Behalf Of Boucher, William Sent: Monday, February 4, 2019 9:04 AM To: Gary Gapinski Cc: open-scap-list@redhat.com Subject: Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS Gary, Similar results with Ububtu 16.04. Not all results were notapplicable, score was given as 25%.

Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS

2019-02-04 Thread Boucher, William
tes Corporation 4900 Lang Ave. NE, Suite 100 Albuquerque, NM 87109-9708 Phone: 505.245.9970 x166 Fax: 505.245.9971 Cell: 505.459.7620 william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: Gary Gapinski [mailto:gapin...@nasa.gov] Sent: Friday, January 25, 2019 9:50 AM To: Boucher, William

[Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card

2019-06-24 Thread Boucher, William
Hi Folks, I've got a machine running Scap Workbench on another remote/networked machine. Both are CentOS 7.5. I set up Workbench to SSH to the remote box as root (for now root ssh login is enabled on both machines), using CentOS 7 content. I selected DISA STIG for Red Hat Enterprise Linux 7.

Re: [Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card

2019-06-25 Thread Boucher, William
william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: open-scap-list-boun...@redhat.com [mailto:open-scap-list-boun...@redhat.com] On Behalf Of Boucher, William Sent: Monday, June 24, 2019 1:52 PM To: open-scap-list@redhat.com Subject: [Open-scap] Wish to disable check or remediation o

Re: [Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card

2019-06-25 Thread Boucher, William
Shawn Wells Sent: Tuesday, June 25, 2019 10:09 AM To: open-scap-list@redhat.com Subject: Re: [Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card On 6/25/19 11:36 AM, Boucher, William wrote: I figured it out! That's great! To help others

[Open-scap] Using SCAP Workbench over a secure LAN with no internet connection

2019-05-06 Thread Boucher, William
Hi folks, I'm using SCAP Workbench with Open SCAP to remediate CentOS 7.5 (actually RedHawk 7.5) systems to evaluate and apply the DISA STIG controls. My problem isn't in getting this to work, I'm networked to the system I am applying controls to and remediation and report generation works