1

I'm using the SCAP WorkBench, and have gone in to customize the CIS profile for RHEL 8. The benchmark items are clearly titled with things like "Modify the System Login Banner". The item properties even give the Security Identifier.

But I cannot find an easy way to match up the profile items in WorkBench with the CIS document. The CIS document I have is called ""CIS Red Hat Enterprise Linux 8 Benchmark v1.0.0" and it's a PDF.

We used to use a home-made script to tighten security. My goal is to match up our old script to the CIS document, and the WorkBench items, to be sure I have everything covered.

Does anyone know of a cross-reference? Or a table online somewhere? (to match up the CIS doc with the WorkBench profile items)

0

There is a table with cross references that you can use:

https://jenkins.complianceascode.io/view/SCAP%20Security%20Guide/job/scap-security-guide-stats/HTML_20Mapping_20Tables/table-rhel8-cisrefs.html

1
  • Perfect! I think this is exactly what I was looking for. Thank you very much. – RansomStoddard Feb 15 at 13:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.