Shouldn't old STIG controls be removed/deprecated?

simp / inspec-profile-disa_stig-el7

InSpec Profile for the EL7 DISA STIG

Apache License 2.0

22 stars 46 forks source link

Shouldn't old STIG controls be removed/deprecated? #88

Open ejaronne opened 5 years ago

ejaronne commented 5 years ago

It appears this version of the profile is written to STIG V1R4, but according to the STIG revision history controls V-71895 and V-72435 were removed in V1R4, and V-72181 was removed in V1R2.

To avoid confusion, shouldn't these be removed? U_Red_Hat_Enterprise_Linux_7_V1R4_Revision_History.pdf

djhaynes commented 4 years ago

This should be handled by PR https://github.com/simp/inspec-profile-disa_stig-el7/pull/114.

ljkimmel commented 4 years ago

Why are we still referring to the v1rX STIG? We are talking about Red Hat Enterprise Linux, yes? Version 2 of the STIG has been available since mid 2018 and many controls have been removed or modified.