ComplianceAsCode / ComplianceAsCode/content

man scap-security-guide(8) mix Centos and RHEL

Open
#8,528 0 comments 0 reactions 0 assignees View on GitHub
Documentation triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

```man 'scap-security-guide(8)'```
lists profiles, first profile is named:
```
...
Profiles in Guide to the Secure Configuration of Red Hat Enterprise Linux 7
Source Datastream: ssg-centos7-ds.xml
...
```
It is definitely not about 'Red Hat Enterprise Linux 7' but 'CentOS 7'. It is not good to mix and match trademarks. RHEL has a actual sections later in manual and it has much more profiles.

#### SCAP Security Guide Version:

scap-security-guide-0.1.60-1.fc35.noarch
scap-security-guide-doc-0.1.60-1.fc35.noarch

I see this also with master 49a3e57f74b68c1cb8c46f1583c3ef141daa5ea4, but I don't have clean build to show. Artifacts below is generated by above versions.

#### Operating System Version:

Fedora 35

#### Steps to Reproduce:

1. man 'scap-security-guide(8)'

#### Actual Results:

```
...
Profiles in Guide to the Secure Configuration of Red Hat Enterprise Linux 7
Source Datastream: ssg-centos7-ds.xml

The Guide to the Secure Configuration of Red Hat Enterprise Linux 7 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:

PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 7

Profile ID: xccdf_org.ssgproject.content_profile_pci-dss

Ensures PCI-DSS v3.2.1 security configuration settings are applied.

Standard System Security Profile for Red Hat Enterprise Linux 7

Profile ID: xccdf_org.ssgproject.content_profile_standard

This profile contains rules to ensure standard security baseline of a Red Hat Enterprise Linux 7 system. Regardless of your system's workload all of
these checks should pass.

Profiles in Guide to the Secure Configuration of Red Hat Enterprise Linux 8
Source Datastream: ssg-centos8-ds.xml

The Guide to the Secure Configuration of Red Hat Enterprise Linux 8 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:

PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8

Profile ID: xccdf_org.ssgproject.content_profile_pci-dss

Ensures PCI-DSS v3.2.1 security configuration settings are applied.

Standard System Security Profile for Red Hat Enterprise Linux 8

Profile ID: xccdf_org.ssgproject.content_profile_standard

This profile contains rules to ensure standard security baseline of a Red Hat Enterprise Linux 8 system. Regardless of your system's workload all of
these checks should pass.
...
```
#### Expected Results:

Something like this:
```
...
Profiles in Guide to the Secure Configuration of CentOS 7
Source Datastream: ssg-centos7-ds.xml

The Guide to the Secure Configuration of CentOS 7 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:

PCI-DSS v3.2.1 Control Baseline for CentOS 7

Profile ID: xccdf_org.ssgproject.content_profile_pci-dss

Ensures PCI-DSS v3.2.1 security configuration settings are applied.

Standard System Security Profile for CentOS 7

Profile ID: xccdf_org.ssgproject.content_profile_standard

This profile contains rules to ensure standard security baseline of a CentOS 7 system. Regardless of your system's workload all of
these checks should pass.

Profiles in Guide to the Secure Configuration of CentOS 8
Source Datastream: ssg-centos8-ds.xml

The Guide to the Secure Configuration of CentOS 8 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:

PCI-DSS v3.2.1 Control Baseline for CentOS 8

Profile ID: xccdf_org.ssgproject.content_profile_pci-dss

Ensures PCI-DSS v3.2.1 security configuration settings are applied.

Standard System Security Profile for CentOS 8

Profile ID: xccdf_org.ssgproject.content_profile_standard

This profile contains rules to ensure standard security baseline of a CentOS 8 system. Regardless of your system's workload all of
these checks should pass.
...
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.