Re:How to Secure a Linux Server
by bitbang on Saturday February 16, 2019 @03:22PM
(#19180723)
As someone who has had to implement STIG, that is not a realistic method. This stuff is implemented via automation over hundreds of nodes at a time, and having to click through anything in automation is slow and error prone.
STIG itself is just a fancy check-list. Ideally, real world implementation is automated via something like OpenSCAP.
STIG itself is just a fancy check-list. Ideally, real world implementation is automated via something like OpenSCAP.