Missing CNSSI 1253 profile for RHEL7 - Githubissues

ComplianceAsCode / content

Security automation content in SCAP, Bash, Ansible, and other formats

https://complianceascode.readthedocs.io/en/latest/

Other

2.22k stars 698 forks source link

Missing CNSSI 1253 profile for RHEL7 #2266

Closed enjaygee closed 7 years ago

enjaygee commented 7 years ago

The "CNSSI 1253 Low/Low/Low Control Baseline for Red Hat Enterprise Linux 7" appears to have been available as of v0.1.32 (https://github.com/OpenSCAP/scap-security-guide/blob/v0.1.32/RHEL/7/input/profiles/nist-CL-IL-AL.xml) but is not in v0.1.33 (https://github.com/OpenSCAP/scap-security-guide/tree/v0.1.33/RHEL/7/input/profiles) up through master (https://github.com/OpenSCAP/scap-security-guide/tree/master/RHEL/7/profiles).

I do not see the removal of this profile referenced in the v0.1.33 release notes (https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.33) so wonder if the removal is a regression.

shawndwells commented 7 years ago

Hey @enjaygee - This was rolled into the USGCB profile.

Ref: https://github.com/OpenSCAP/scap-security-guide/blob/master/RHEL/7/profiles/ospp-rhel7.xml#L11

enjaygee commented 7 years ago

Thank you @shawndwells for the information and quick feedback.