<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:#2E74B5;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<p class="msipheader8eb7d5eb" align="Left" style="margin:0"><span style="font-size:10.0pt;font-family:Calibri;color:#737373">Internal Use - Confidential</span></p>
<br>
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#2E74B5">Hi<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5">I recently learned about OpenSCAP, and it seems to fill a need in my team. My team needs to address (close) all of the rules in the SLES 12 STIG on our product. It seems that using oscap, along with the most-recent
‘</span><span style="font-size:9.5pt;font-family:Consolas;color:#C7254E;background:#F9F2F4">scap-security-guide</span><span style="color:#2E74B5">’ (which appears to cover 146 SLES 12 STIG rules), will allow me to see which rules are open (‘oscap xccdf eval’)
and to implement changes to close those rules (‘oscap xccdf eval –remediate’).<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5">I know that I can use the ‘—rule’ option to specify the name of a single rule to evaluate or remediate.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5">Our group identifies rules to be fixed, in our work management system and other systems, by the SLES 12 STIG ‘STIG ID’ value (ex., SLES-12-010000). I tried to use this value in the ‘—rule’ option, and it failed
to identify/find that rule.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5">How can I make oscap operate on a rule identified by ‘STIG ID’ value (or, even better, on a file containing a list of ‘STIG ID’ rules?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5">Thanks!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5">tl<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#2E74B5"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868">Terry Lemons<o:p></o:p></span></b></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868"><o:p> </o:p></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868"><img width="80" height="14" style="width:.8333in;height:.1458in" id="Picture_x0020_1" src="cid:image001.png@01D748C5.EBA400B0" alt="DellEMC_Logo_Hz_Blue_rgb_10percent"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868">Data Management<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868">Infrastructure Solutions Group<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#215868">176 South Street, MS 2/B-34<br>
Hopkinton MA 01748<br>
</span><span style="color:#1F497D"><a href="mailto:terry.lemons@dell.com"><span style="color:blue">terry.lemons@dell.com</span></a></span><span style="color:#1F497D"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>