<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1540121713;
mso-list-type:hybrid;
mso-list-template-ids:-1226822800 67698705 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-text:"%1\)";
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Stuart,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">How do I get the current/latest scap security guide?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">1)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">I went to <a href="https://www.open-scap.org/security-policies/scap-security-guide/">
https://www.open-scap.org/security-policies/scap-security-guide/</a> and clicked on the Ubuntu symbol to get directions for installing it, but that gave message “The SCAP Security Guide package is not available on the Ubuntu distribution yet. Check for update.”<o:p></o:p></span></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="color:#1F497D"><span style="mso-list:Ignore">2)<span style="font:7.0pt "Times New Roman"">
</span></span></span><![endif]><span style="color:#1F497D">“apt-get install scap-security-guide” produced the error “Unable to locate package scap-security-guide.”<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">I did successfully install libopenscap8 (“apt-get install libopenscap8”).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">All help is appreciated.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span style="color:black">William B. Boucher, BSEE<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Embedded Systems Software Engineer
<br>
Information Systems Security Manager<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">MZA Associates Corporation<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2021 Girard Blvd., SE, Suite 150<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Albuquerque, New Mexico 87106<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Phone: 505.245.9970 x166<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Fax: 505.245.9971<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Cell: 505.459.7620<o:p></o:p></span></p>
<p class="MsoNormal"><u><span style="color:blue"><a href="mailto:william.boucher@mza.com">william.boucher@mza.com</a></span></u><span style="color:black"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Newman, Stuart J. (GSFC-491.0)[KBRwyle] [mailto:stuart.j.newman@nasa.gov]
<br>
<b>Sent:</b> Wednesday, November 28, 2018 4:19 AM<br>
<b>To:</b> Boucher, William <William.Boucher@mza.com>; open-scap-list@redhat.com<br>
<b>Subject:</b> RE: Benchmark for Canonical Ubuntu 16.04 LTS<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:#1F497D">The current (0.1.41) version of the scap security guide has Ubuntu benchmarks.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><b><span style="font-family:"Arial",sans-serif;color:#545761">Stuart J Newman<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><img border="0" width="106" height="22" id="Picture_x0020_11" src="cid:image001.png@01D486FB.CB9219D0"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#545761">Engineer 4; Systems<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#545761">NASA/Goddard Space Flight Center, Building 14 Room 252 | Greenbelt, Maryland 20771 | USA<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#545761">Office: +1 301. 286.5145 | Mobile: +1443.878.6146 |
<a href="mailto:Stuart.J.Newman@nasa.gov">Stuart.J.Newman@nasa.gov</a></span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:#1F497D"><o:p> </o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:12.0pt;font-family:"Times New Roman",serif;color:#1F497D">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Times New Roman",serif;color:#1F497D">This e-mail, including any attached files, may contain confidential and privileged information for the sole use of the intended recipient. Any review, use,
distribution, or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message.
<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> <a href="mailto:open-scap-list-bounces@redhat.com">
open-scap-list-bounces@redhat.com</a> <<a href="mailto:open-scap-list-bounces@redhat.com">open-scap-list-bounces@redhat.com</a>>
<b>On Behalf Of </b>Boucher, William<br>
<b>Sent:</b> November 27, 2018 18:23<br>
<b>To:</b> <a href="mailto:open-scap-list@redhat.com">open-scap-list@redhat.com</a><br>
<b>Subject:</b> [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi folks,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am currently hardening an Ubuntu embedded system for delivery to a customer.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have downloaded the “Canonical Ubuntu 16.04 LTS STIG Ver 1, Rel 1” from DISA, and I have obtained a copy of the SCAP Compliance checker tool “SCC 5.0.2 Ubuntu 16 AMD64”.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">What I am missing is an SCAP Benchmark file for Ubuntu 16.04. Does one exist?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I would like to use OpenSCAP to harden then scan this IS. The Open-SCAP BASE page says that Ubuntu is supported, so I can get the tools installed. But without a benchmark how would I proceed from there?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> --Bill<o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">William B. Boucher, BSEE<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Embedded Systems Software Engineer
<br>
Information Systems Security Manager<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">MZA Associates Corporation<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">2021 Girard Blvd., SE, Suite 150<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Albuquerque, New Mexico 87106<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Phone: 505.245.9970 x166<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Fax: 505.245.9971<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">Cell: 505.459.7620<o:p></o:p></span></p>
<p class="MsoNormal"><u><span style="color:blue"><a href="mailto:william.boucher@mza.com">william.boucher@mza.com</a></span></u><span style="color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>