[redhat-lspp] Configuring for STIG/FISMA compliance

Wed Feb 8 00:30:18 UTC 2006

As I told Steve Smoogen, we began work on this a while ago (fortknox.sourceforge.net) and also worked with Jay Beale to add a "verify" mode to Bastille-Linux (not logged, just displayed in HTML report).  We've begun working with Aaron Lippold at DISA's Open Source Steering Group to also get the DISA STIGs incorporated into Bastille-Linux.  His group at DISA is trying to take on several other open source initiatives.

Will

	-----Original Message----- 
	From: redhat-lspp-bounces at redhat.com on behalf of Steve Grubb 
	Sent: Tue 2/7/2006 7:41 AM 
	To: redhat-lspp at redhat.com 
	Cc: Stephen J. Smoogen 
	Subject: Re: [redhat-lspp] Configuring for STIG/FISMA compliance

	On Sunday 05 February 2006 15:24, Stephen J. Smoogen wrote:
	> Has anyone else seen any open-source tool-sets that are aimed at this?
	> I am interested in either in putting my ugly bash/sed/awk stuff
	> (currently called Jotun as a play on the Titan toolkit) or
	> contributing to other projects.

	Out of curiosity, does your script have a verify mode that can later check the
	system to ensure that its still in the right config?

	-Steve

	--
	redhat-lspp mailing list
	redhat-lspp at redhat.com
	https://www.redhat.com/mailman/listinfo/redhat-lspp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/redhat-lspp/attachments/20060207/c588d343/attachment.htm>