<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <meta name="Generator" content="Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang="EN-US" link="blue" vlink="purple"> <div class="WordSection1"> Stuart and Watson,<o:p></o:p> <o:p> </o:p> I found the packages for Ubuntu 18.04 (“cosmic”) but not for Ubuntu 16.04 (“xenial”). The DISA STIG is written specifically for Ubuntu 16.04 (“U_Canonical_16-04_LTS_V1R1_STIG.zip”). Am I not looking in the right place for the SSG?<o:p></o:p> <o:p> </o:p> I found the ssg packages for Ubuntu 18.04 at <a href="https://packages.ubuntu.com/search?suite=cosmic&searchon=names&keywords=ssg"> https://packages.ubuntu.com/search?suite=cosmic&searchon=names&keywords=ssg</a>, but they are not in the 16.04 package listing at <a href="https://packages.ubuntu.com/search?suite=xenial&searchon=names&keywords=ssg"> https://packages.ubuntu.com/search?suite=xenial&searchon=names&keywords=ssg</a>.<o:p></o:p> <o:p> </o:p> Could they be in another repository for 16.04? (Note I am using the latest xenial, 16.04.5, which has the same Linux kernel as the latest cosmic release, 4.15.)<o:p></o:p> <o:p> </o:p> Thank you for your help and patience,<o:p></o:p> <o:p> </o:p> --Bill<o:p></o:p> <o:p> </o:p> William B. Boucher, BSEE<o:p></o:p> Embedded Systems Software Engineer Information Systems Security Manager<o:p></o:p> MZA Associates Corporation<o:p></o:p> 4900 Lang Ave. NE, Suite 100<o:p></o:p> Albuquerque, NM 87109-9708<o:p></o:p> Phone: 505.245.9970 x166<o:p></o:p> Fax: 505.245.9971<o:p></o:p> Cell: 505.459.7620<o:p></o:p> <a href="mailto:william.boucher@mza.com">william.boucher@mza.com</a><o:p></o:p> <o:p> </o:p> From: Watson Sato [mailto:wsato@redhat.com] Sent: Monday, January 7, 2019 7:58 AM To: Boucher, William <William.Boucher@mza.com> Cc: Newman, Stuart J. (GSFC-491.0)[KBRwyle] <stuart.j.newman@nasa.gov>; open-scap-list@redhat.com Subject: Re: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS<o:p></o:p> <o:p> </o:p> <div> <div> <div> Hello,<o:p></o:p> </div> <div> <o:p> </o:p> </div> <o:p> </o:p> <div> <div> On Wed, Nov 28, 2018 at 5:39 PM Boucher, William <<a href="mailto:William.Boucher@mza.com">William.Boucher@mza.com</a>> wrote:<o:p></o:p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> Stuart,<o:p></o:p> <o:p></o:p> How do I get the current/latest scap security guide?<o:p></o:p> <o:p></o:p> </div> </div> </blockquote> <div> Latest pre-built content can be grabbed at <a href="https://github.com/ComplianceAsCode/content/releases"> https://github.com/ComplianceAsCode/content/releases</a>, just download the zip file.<o:p></o:p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> 1) I went to <a href="https://www.open-scap.org/security-policies/scap-security-guide/" target="_blank"> https://www.open-scap.org/security-policies/scap-security-guide/</a> and clicked on the Ubuntu symbol to get directions for installing it, but that gave message “The SCAP Security Guide package is not available on the Ubuntu distribution yet. Check for update.”<o:p></o:p> </div> </div> </blockquote> <div> The website needs to updated, there are SCAP Security Guide packages for Ubuntu and Debian.<o:p></o:p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> 2) “apt-get install scap-security-guide” produced the error “Unable to locate package scap-security-guide.”<o:p></o:p> </div> </div> </blockquote> <div> <o:p> </o:p> </div> <div> It seems that the packages are named slightly different in Ubuntu, see: <a href="https://packages.ubuntu.com/source/disco/scap-security-guide">https://packages.ubuntu.com/source/disco/scap-security-guide</a> <o:p></o:p> </div> <blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in"> <div> <div> <o:p></o:p> I did successfully install libopenscap8 (“apt-get install libopenscap8”).<o:p></o:p> <o:p></o:p> All help is appreciated.<o:p></o:p> <o:p></o:p> <div> William B. Boucher, BSEE<o:p></o:p> Embedded Systems Software Engineer Information Systems Security Manager<o:p></o:p> MZA Associates Corporation<o:p></o:p> 2021 Girard Blvd., SE, Suite 150<o:p></o:p> Albuquerque, New Mexico 87106<o:p></o:p> Phone: 505.245.9970 x166<o:p></o:p> Fax: 505.245.9971<o:p></o:p> Cell: 505.459.7620<o:p></o:p> <a href="mailto:william.boucher@mza.com" target="_blank">william.boucher@mza.com</a><o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;border-color:currentcolor currentcolor"> From: Newman, Stuart J. (GSFC-491.0)[KBRwyle] [mailto:<a href="mailto:stuart.j.newman@nasa.gov" target="_blank">stuart.j.newman@nasa.gov</a>] Sent: Wednesday, November 28, 2018 4:19 AM To: Boucher, William <<a href="mailto:William.Boucher@mza.com" target="_blank">William.Boucher@mza.com</a>>; <a href="mailto:open-scap-list@redhat.com" target="_blank">open-scap-list@redhat.com</a> Subject: RE: Benchmark for Canonical Ubuntu 16.04 LTS<o:p></o:p> </div> </div> <o:p></o:p> The current (0.1.41) version of the scap security guide has Ubuntu benchmarks.<o:p></o:p> <o:p></o:p> <div> Stuart J Newman<o:p></o:p> <o:p></o:p> <img border="0" width="106" height="22" id="gmail-m_4855630425819865659Picture_x0020_11" src="cid:image001.png@01D4B19F.F1DDFA40"><o:p></o:p> <o:p></o:p> Engineer 4; Systems<o:p></o:p> NASA/Goddard Space Flight Center, Building 14 Room 252 | Greenbelt, Maryland 20771 | USA<o:p></o:p> Office: +1 301. 286.5145 | Mobile: +1443.878.6146 | <a href="mailto:Stuart.J.Newman@nasa.gov" target="_blank">Stuart.J.Newman@nasa.gov</a><o:p></o:p> <o:p></o:p> <o:p></o:p> <div class="MsoNormal" align="center" style="text-align:center"> <hr size="2" width="100%" align="center"> </div> This e-mail, including any attached files, may contain confidential and privileged information for the sole use of the intended recipient. Any review, use, distribution, or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message. <o:p></o:p> </div> <o:p></o:p> <div> <div style="border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;border-color:currentcolor currentcolor"> From: <a href="mailto:open-scap-list-bounces@redhat.com" target="_blank">open-scap-list-bounces@redhat.com</a> <<a href="mailto:open-scap-list-bounces@redhat.com" target="_blank">open-scap-list-bounces@redhat.com</a>> On Behalf Of Boucher, William Sent: November 27, 2018 18:23 To: <a href="mailto:open-scap-list@redhat.com" target="_blank">open-scap-list@redhat.com</a> Subject: [Open-scap] Benchmark for Canonical Ubuntu 16.04 LTS<o:p></o:p> </div> </div> <o:p></o:p> <o:p></o:p> Hi folks,<o:p></o:p> <o:p></o:p> I am currently hardening an Ubuntu embedded system for delivery to a customer.<o:p></o:p> <o:p></o:p> I have downloaded the “Canonical Ubuntu 16.04 LTS STIG Ver 1, Rel 1” from DISA, and I have obtained a copy of the SCAP Compliance checker tool “SCC 5.0.2 Ubuntu 16 AMD64”.<o:p></o:p> <o:p></o:p> What I am missing is an SCAP Benchmark file for Ubuntu 16.04. Does one exist?<o:p></o:p> <o:p></o:p> I would like to use OpenSCAP to harden then scan this IS. The Open-SCAP BASE page says that Ubuntu is supported, so I can get the tools installed. But without a benchmark how would I proceed from there? <o:p></o:p> <o:p></o:p> Thank you,<o:p></o:p> <o:p></o:p> --Bill<o:p></o:p> William B. Boucher, BSEE<o:p></o:p> Embedded Systems Software Engineer Information Systems Security Manager<o:p></o:p> MZA Associates Corporation<o:p></o:p> 2021 Girard Blvd., SE, Suite 150<o:p></o:p> Albuquerque, New Mexico 87106<o:p></o:p> Phone: 505.245.9970 x166<o:p></o:p> Fax: 505.245.9971<o:p></o:p> Cell: 505.459.7620<o:p></o:p> <a href="mailto:william.boucher@mza.com" target="_blank">william.boucher@mza.com</a><o:p></o:p> <o:p></o:p> </div> </div> _______________________________________________ Open-scap-list mailing list <a href="mailto:Open-scap-list@redhat.com" target="_blank">Open-scap-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/open-scap-list" target="_blank">https://www.redhat.com/mailman/listinfo/open-scap-list</a><o:p></o:p> </blockquote> </div> -- <o:p></o:p> <div> <div> Watson Sato Security Technologies | Red Hat, Inc<o:p></o:p> </div> </div> </div> </div> </div> </body> </html>