Bug 1464899 - url to disa srgs dead
url to disa srgs dead
Status: ON_QA
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: scap-security-guide (Show other bugs)
Unspecified Unspecified
medium Severity medium
: rc
: ---
Assigned To: Watson Yuuma Sato
BaseOS QE Security Team
Ioanna Gkioka
Depends On:
  Show dependency treegraph
Reported: 2017-06-26 04:29 EDT by Marek Haicman
Modified: 2017-11-20 09:26 EST (History)
4 users (show)

See Also:
Fixed In Version: scap-security-guide-0.1.36-1.el7
Doc Type: Known Issue
Doc Text:
URL to DISA SRGs is incorrect The SCAP Security Guide (SSG) rules refer to Defense Information Systems Agency Security Requirement Guides (DISA SRGs). Connecting to the URL fails with an *404 - not found* error. As a consequence, users have no direct reference to SRGs. To work around the problem, use the new URL: http://iase.disa.mil/stig/os/general/Pages/index.aspx/
Story Points: ---
Clone Of:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Marek Haicman 2017-06-26 04:29:36 EDT
Description of problem:
SCAP Security Guide refers to DISA SRG in the rules. The link is dead, though

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. open guide with USGCB profile, or results.html of the same
2. try to click SRG reference in one of the rules

Actual results:

Expected results:
Relevant page is opened

Additional info:
Comment 1 Watson Yuuma Sato 2017-11-13 09:48:48 EST
This is the upstream patch: https://github.com/OpenSCAP/scap-security-guide/pull/2345

Note You need to log in before you can comment on or make changes to this bug.