Have issues been reported that may affect my ability to use the RHEL5 USGCB content with SCAP 1.0 validated tools?
NIST has not validated any products using the USGCB RHEL5 content; however, in developing the SCAP content, NIST used a variety of reference implementations, COTS, and GOTS validated products to ensure the SCAP content was created correctly. In this SCAP content creation and testing process, it was noted that CCE-4060-0, the login banner check which checks for text in the /etc/issue file caused inconsistent behavior in some of the products. As a result, this configuration check was marked as a manual check. The “usgcb-rhel5desktop-issues” spreadsheet that is available at http://usgcb.nist.gov documents all known issues identified with RHEL5 Desktop USGCB.
Related Questions
- What if I have special circumstances that affect my ability to complete the FAFSA, or affect the information previously reported on the FAFSA?
- How can agencies use Security Content Automation Protocol (SCAP) USGCB content to automate FISMA compliance of technical controls?
- HOW DOES FLUORO CONTENT AFFECT PERFORMANCE?
