Are all configuration settings supported by the SCAP content?
While nearly all configuration settings are supported via the kickstart scripts, not all of the settings can be automatically assessed using SCAP. In the alpha release, the SCAP 1.1 content supports approximately 80% of the RHEL5 Desktop USGCB settings. Additional configurations will be automated in later versions of the SCAP content.
Related Questions
- Is checking FDCC settings 100% automated through Security Content Automation Protocol (SCAP)? Will manual assessment methods be required?
- Is NIST working exclusively with Microsoft on Security Content Automation Protocol (SCAP) security settings?
- What settings cannot be verified with the current Security Content Automation Protocol (SCAP) tools?
