The scap-security-guide project provides a guide for configuration of the system from the final system's security point of view. The guidance is specified in the Security Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening advice, linked to government requirements where applicable. The project bridges the gap between generalized policy requirements and specific implementation guidelines. The Red Hat Enterprise Linux 6 system administrator can use the oscap command-line tool from the openscap-utils package to verify that the system conforms to provided guideline. Refer to scap-security-guide(8) manual page for further information.
Please login to add feedback.
This update has been submitted for testing by jlieskov.
This update is currently being pushed to the Fedora EPEL 6 testing updates repository.
This update has been pushed to testing
Tested install via: $ sudo yum localinstall http://kojipkgs.fedoraproject.org//packages/scap-security-guide/0.1/15.el6/noarch/scap-security-guide-0.1-15.el6.noarch.rpm Documentation properly installed: $ ll /usr/share/doc/scap-security-guide-0.1/ total 4432 -rw-r--r--. 1 root root 414128 Nov 1 07:23 JBossEAP5_Guide.html -rw-r--r--. 1 root root 1211 Nov 1 07:23 LICENSE -rw-r--r--. 1 root root 1508209 Nov 1 08:00 rhel6-guide.html -rw-r--r--. 1 root root 178164 Nov 1 07:59 table-rhel6-cces.html -rw-r--r--. 1 root root 128261 Nov 1 07:59 table-rhel6-nistrefs-common.html -rw-r--r--. 1 root root 498514 Nov 1 07:59 table-rhel6-nistrefs.html -rw-r--r--. 1 root root 564664 Nov 1 08:00 table-rhel6-srgmap-flat.html -rw-r--r--. 1 root root 563808 Nov 1 08:00 table-rhel6-srgmap-flat.xhtml -rw-r--r--. 1 root root 363740 Nov 1 08:00 table-rhel6-srgmap.html -rw-r--r--. 1 root root 297751 Nov 1 08:00 table-rhel6-stig.html Content properly installed: $ ll /usr/share/xml/scap/ssg/content/ total 2480 -rw-r--r--. 1 root root 3000 Nov 1 07:23 eap5-cpe-dictionary.xml -rw-r--r--. 1 root root 8347 Nov 1 07:23 eap5-cpe-oval.xml -rw-r--r--. 1 root root 174783 Nov 1 07:23 eap5-ocil.xml -rw-r--r--. 1 root root 64810 Nov 1 07:23 eap5-oval.xml -rw-r--r--. 1 root root 341288 Nov 1 07:23 eap5-xccdf.xml -rw-r--r--. 1 root root 600 Nov 1 08:00 ssg-rhel6-cpe-dictionary.xml -rw-r--r--. 1 root root 3642 Nov 1 08:00 ssg-rhel6-cpe-oval.xml -rw-r--r--. 1 root root 759094 Nov 1 08:00 ssg-rhel6-oval.xml -rw-r--r--. 1 root root 1165427 Nov 1 08:00 ssg-rhel6-xccdf.xml Content functions properly: $ sudo oscap xccdf eval --profile stig-rhel6-server --cpe ssg-rhel6-cpe-dictionary.xml ssg-rhel6-xccdf.xml {{ scan runs }}
Tested install via: #yum localinstall http://kojipkgs.fedoraproject.org//packages/scap-security-guide/0.1/15.el6/noarch/scap-security-guide-0.1-15.el6.noarch.rpm Documentation installed properly: # ll /usr/share/doc/scap-security-guide-0.1/total 4432 -rw-r--r--. 1 root root 414128 Nov 1 07:23 JBossEAP5_Guide.html -rw-r--r--. 1 root root 1211 Nov 1 07:23 LICENSE -rw-r--r--. 1 root root 1508209 Nov 1 08:00 rhel6-guide.html -rw-r--r--. 1 root root 178164 Nov 1 07:59 table-rhel6-cces.html -rw-r--r--. 1 root root 128261 Nov 1 07:59 table-rhel6-nistrefs-common.html -rw-r--r--. 1 root root 498514 Nov 1 07:59 table-rhel6-nistrefs.html -rw-r--r--. 1 root root 564664 Nov 1 08:00 table-rhel6-srgmap-flat.html -rw-r--r--. 1 root root 563808 Nov 1 08:00 table-rhel6-srgmap-flat.xhtml -rw-r--r--. 1 root root 363740 Nov 1 08:00 table-rhel6-srgmap.html -rw-r--r--. 1 root root 297751 Nov 1 08:00 table-rhel6-stig.html Content installed properly: # ll /usr/share/xml/scap/ssg/content/total 2480 -rw-r--r--. 1 root root 3000 Nov 1 07:23 eap5-cpe-dictionary.xml -rw-r--r--. 1 root root 8347 Nov 1 07:23 eap5-cpe-oval.xml -rw-r--r--. 1 root root 174783 Nov 1 07:23 eap5-ocil.xml -rw-r--r--. 1 root root 64810 Nov 1 07:23 eap5-oval.xml -rw-r--r--. 1 root root 341288 Nov 1 07:23 eap5-xccdf.xml -rw-r--r--. 1 root root 600 Nov 1 08:00 ssg-rhel6-cpe-dictionary.xml -rw-r--r--. 1 root root 3642 Nov 1 08:00 ssg-rhel6-cpe-oval.xml -rw-r--r--. 1 root root 759094 Nov 1 08:00 ssg-rhel6-oval.xml -rw-r--r--. 1 root root 1165427 Nov 1 08:00 ssg-rhel6-xccdf.xml Content functions properly: # oscap xccdf eval --profile stig-rhel6-server --cpe ssg-rhel6-cpe-dictionary.xml ssg-rhel6-xccdf.xml {{scan runs}}
This update has reached the stable karma threshold and will be pushed to the stable updates repository
This update is currently being pushed to the Fedora EPEL 6 stable updates repository.
This update has been pushed to stable