<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> </head> <body text="#000000" bgcolor="#FFFFFF"> <div class="moz-cite-prefix">On 11/27/18 6:23 PM, Boucher, William wrote: </div> <blockquote type="cite" cite="mid:47d05366e9dc4a63941847dbeaec447f@ABQ-Ex01.mza.lan"> <o:p> </o:p> Hi folks,<o:p></o:p> I am currently hardening an Ubuntu embedded system for delivery to a customer.<o:p></o:p><o:p> </o:p> I have downloaded the “Canonical Ubuntu 16.04 LTS STIG Ver 1, Rel 1” from DISA, and I have obtained a copy of the SCAP Compliance checker tool “SCC 5.0.2 Ubuntu 16 AMD64”.<o:p></o:p> What I am missing is an SCAP Benchmark file for Ubuntu 16.04. Does one exist?<o:p></o:p><o:p> </o:p> I would like to use OpenSCAP to harden then scan this IS. The Open-SCAP BASE page says that Ubuntu is supported, so I can get the tools installed. But without a benchmark how would I proceed from there? </blockquote> Looks like DISA does not publish SCAP content for their Ubuntu STIG: <a class="moz-txt-link-freetext" href="https://iase.disa.mil/stigs/scap/Pages/index.aspx">https://iase.disa.mil/stigs/scap/Pages/index.aspx</a> </body> </html>