ComplianceAsCode / ComplianceAsCode/content
man scap-security-guide(8) mix Centos and RHEL
- Dominant language
- Shell
- Stars
- 2.8k
- Forks
- 828
- Avg merge
- 3d 8m
- Merged PRs (30d)
- 80
Description
#### Description of problem:
```man 'scap-security-guide(8)'```
lists profiles, first profile is named:
```
...
Profiles in Guide to the Secure Configuration of Red Hat Enterprise Linux 7
Source Datastream: ssg-centos7-ds.xml
...
```
It is definitely not about 'Red Hat Enterprise Linux 7' but 'CentOS 7'. It is not good to mix and match trademarks. RHEL has a actual sections later in manual and it has much more profiles.
#### SCAP Security Guide Version:
scap-security-guide-0.1.60-1.fc35.noarch
scap-security-guide-doc-0.1.60-1.fc35.noarch
I see this also with master 49a3e57f74b68c1cb8c46f1583c3ef141daa5ea4, but I don't have clean build to show. Artifacts below is generated by above versions.
#### Operating System Version:
Fedora 35
#### Steps to Reproduce:
1. man 'scap-security-guide(8)'
#### Actual Results:
```
...
Profiles in Guide to the Secure Configuration of Red Hat Enterprise Linux 7
Source Datastream: ssg-centos7-ds.xml
The Guide to the Secure Configuration of Red Hat Enterprise Linux 7 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 7
Profile ID: xccdf_org.ssgproject.content_profile_pci-dss
Ensures PCI-DSS v3.2.1 security configuration settings are applied.
Standard System Security Profile for Red Hat Enterprise Linux 7
Profile ID: xccdf_org.ssgproject.content_profile_standard
This profile contains rules to ensure standard security baseline of a Red Hat Enterprise Linux 7 system. Regardless of your system's workload all of
these checks should pass.
Profiles in Guide to the Secure Configuration of Red Hat Enterprise Linux 8
Source Datastream: ssg-centos8-ds.xml
The Guide to the Secure Configuration of Red Hat Enterprise Linux 8 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:
PCI-DSS v3.2.1 Control Baseline for Red Hat Enterprise Linux 8
Profile ID: xccdf_org.ssgproject.content_profile_pci-dss
Ensures PCI-DSS v3.2.1 security configuration settings are applied.
Standard System Security Profile for Red Hat Enterprise Linux 8
Profile ID: xccdf_org.ssgproject.content_profile_standard
This profile contains rules to ensure standard security baseline of a Red Hat Enterprise Linux 8 system. Regardless of your system's workload all of
these checks should pass.
...
```
#### Expected Results:
Something like this:
```
...
Profiles in Guide to the Secure Configuration of CentOS 7
Source Datastream: ssg-centos7-ds.xml
The Guide to the Secure Configuration of CentOS 7 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:
PCI-DSS v3.2.1 Control Baseline for CentOS 7
Profile ID: xccdf_org.ssgproject.content_profile_pci-dss
Ensures PCI-DSS v3.2.1 security configuration settings are applied.
Standard System Security Profile for CentOS 7
Profile ID: xccdf_org.ssgproject.content_profile_standard
This profile contains rules to ensure standard security baseline of a CentOS 7 system. Regardless of your system's workload all of
these checks should pass.
Profiles in Guide to the Secure Configuration of CentOS 8
Source Datastream: ssg-centos8-ds.xml
The Guide to the Secure Configuration of CentOS 8 is broken into 'profiles', groupings of security settings that correlate to a known pol‐
icy. Available profiles are:
PCI-DSS v3.2.1 Control Baseline for CentOS 8
Profile ID: xccdf_org.ssgproject.content_profile_pci-dss
Ensures PCI-DSS v3.2.1 security configuration settings are applied.
Standard System Security Profile for CentOS 8
Profile ID: xccdf_org.ssgproject.content_profile_standard
This profile contains rules to ensure standard security baseline of a CentOS 8 system. Regardless of your system's workload all of
these checks should pass.
...
```
Contributor guide
Assessment
This issue has not been assessed yet.