[B! SCAP] ra1gawaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ra1gawa id:ra1gawa

SCAPã«é–¢ã™ã‚‹ra1gawaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OpenSCAPï¼ˆè„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ³ï¼‰ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¨ä½¿ã„æ–¹ãƒ¡ãƒ¢
å‚è€ƒè³‡æ–™ï¼š ç¬¬6ç« ã‚³ãƒ³ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ãŠã‚ˆã³ OpenSCAP ã‚’ä½¿ã£ãŸè„†å¼±æ€§ã®ã‚¹ã‚ãƒ£ãƒ³ï¼šRed Hat Customer Portal ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šå…±é€šåŒ–æ‰‹é †SCAPæ¦‚èª¬ï¼šIPA OpenSCAP ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« RPM ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã®ã§ yum ã‹ã‚‰ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ãã¾ã™ã€‚ ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚ŒãŸ oscap ã‚³ãƒžãƒ³ãƒ‰ã« -V ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’ä»˜ã‘ã¦å®Ÿè¡Œã™ã‚‹ã¨ã€ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãªã©ã‚’ç¢ºèªã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ oscap -V ==== Supported specifications ==== XCCDF Version: 1.2 OVAL Version: 5.11.1 CPE Version: 2.3 CVSS Version: 2.0 CVE Version: 2.0 Asset Identification Version: 1.1 Asset Report
ra1gawa 2021/06/30
OSS

OpenSCAP

SCAP

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
OpenSCAPã‚’ä½¿ç”¨ã—ã¦ã¿ã‚‹ | çŒ«ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ç¾åœ¨CIS Controls 7.1ã®èª¿æŸ»ã‚’è¡Œã£ã¦ã„ã¾ã™ãŒã€ãã“ã®Control 3ã«ã€Œç¶™ç¶šçš„ãªè„†å¼±æ€§ç®¡ç†ã€ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ã€‚ ãã‚Œã‚’èª¿ã¹ã¦ã„ãŸéš›ã«ã€ŒOpenSCAPã€ã¨ã„ã†é¢ç™½ãã†ãªãƒ„ãƒ¼ãƒ«ã‚’è¦‹ã¤ã‘ãŸã®ã§ãã‚Œã«ã¤ã„ã¦è¨˜äº‹ã«ã—ã¦ã„ãã¾ã™ã€‚ ãªãŠã€ã‚ãã¾ã§å€‹äººçš„ãªç¯„å›²ã§ä½¿ç”¨ã—ãŸã ã‘ã§ã‚ã‚Šã€çµ„ç¹”ã«ä½¿ç”¨ã—ã¦ã¿ã‚ˆã†ã¨ã™ã‚‹å ´åˆã¯ã¡ã‚ƒã‚“ã¨è‡ªçµ„ç¹”ã§ã¾ãšã¯æ¤œè¨¼ã‚’è¡Œã†ã“ã¨ã‚’æŽ¨å¥¨ã—ã¾ã™ã€‚ ã¾ãŸã€è¨˜è¼‰å†…å®¹ã«ç•°ãªã‚‹ç‚¹ãŒã”ã–ã„ã¾ã—ãŸã‚‰ã€ãŠæ‰‹æ•°ã§ã™ãŒãŠå•ã„åˆã‚ã›ã„ãŸã ã‘ã‚Œã°å¹¸ã„ã§ã™ã€‚ OpenSCAPã®ã€ŒSCAPã€ã«ã¤ã„ã¦ ã¾ãšã¯ã€ŒSCAPã€ã¨ã„ã†è¨€è‘‰ã‚’èžã„ãŸã“ã¨ãŒç„¡ã„äººã‚‚å¤šã„ã‹ã¨æ€ã„ã¾ã™ã®ã§ã€ã“ã¡ã‚‰ã‹ã‚‰è§£èª¬ã—ã¾ã™ã€‚ï¼ˆå®Ÿéš›ã«å‹‰å¼·ä¼šã§ç™ºè¡¨ã—ãŸéš›ã«èžã„ã¦ã‚‚çŸ¥ã£ã¦ã„ã‚‹äººã¯ã‚ã¾ã‚Šã„ãªã‹ã£ãŸãƒ»ãƒ»ãƒ»ï¼‰ ã€ŒSecurity Content Automation Protocolï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šå…±é€šåŒ–æ‰‹é †ã€ã®é æ–‡å—ã‚’ã¨ã£ã¦SCA
ra1gawa 2021/06/30
OSS

OpenSCAP

SCAP

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
OpenSCAPã¨ã¯ | OSSã®ãƒ‡ãƒ¼ã‚¸ãƒ¼ãƒãƒƒãƒˆ
OpenSCAPã¨ã¯ã€SCAPã®è¦æ ¼ã«å¾“ã£ã¦ã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒªã‚·ãƒ¼ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ SCAP(Security Content Automation Protocol)ã¯ã€ã‚¢ãƒ¡ãƒªã‚«å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€(NIST)ãŒé€²ã‚ã¦ã„ã‚‹æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–ã®è‡ªå‹•åŒ–ã¨æ¨™æº–åŒ–ã‚’è¡Œãªã†ãŸã‚ã®è¦æ ¼ã§ã™ã€‚ã‚¢ãƒ¡ãƒªã‚«ã®NVD(National Vulnerability Datase)ã‚„æ—¥æœ¬ã®JVN(Japan Vulnerability Notes)ç‰ã€å„ç¨®è„†å¼±æ€§æƒ…å ±ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ OpenSCAPã¯ã€SCAPã‚’å®Ÿæ–½ã™ã‚‹ãŸã‚ã®ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ OpenSCAPã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ã§ã€SCAPã®è¦æ ¼ã«å¾“ã£ã¦ã‚·ã‚¹ãƒ†ãƒ ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒªã‚·ãƒ¼ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚OpenSCAPã§ã¯ã€ä¸€èˆ¬çš„ã«åˆ©ç”¨ã§ãã‚‹æ¨™æº–çš„ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒªã‚·ãƒ¼ã‚»ãƒƒãƒˆã‚‚
ra1gawa 2021/06/30
OSS

OpenSCAP

SCAP

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
Home | OpenSCAP portal
Scan your system Install SCAP Workbench or OpenSCAP Base Choose a policy Adjust your settings Evaluate the system Tools The OpenSCAP ecosystem provides multiple tools to assist administrators and auditors with assessment, measurement, and enforcement of security baselines. We maintain great flexibility and interoperability, reducing the costs of performing security audits. View more Security Polic
ra1gawa 2021/06/30
OSS

OpenSCAP

SCAP

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œã†OSSãƒ„ãƒ¼ãƒ«ã€ŒOpenSCAPã€ã§ä½•ãŒåˆ†ã‹ã‚‹ã®ã‹
è„†å¼±æ€§æ¤œæŸ»ã‚’è¡Œã†OSSãƒ„ãƒ¼ãƒ«ã€ŒOpenSCAPã€ã§ä½•ãŒåˆ†ã‹ã‚‹ã®ã‹ï¼šOpenSCAPã§è„†å¼±æ€§å¯¾ç–ã¯ã©ã†å¤‰ã‚ã‚‹ï¼Ÿï¼ˆ4ï¼‰ æœ¬é€£è¼‰ã§ã¯ã€ã‚°ãƒãƒ¼ãƒãƒ«ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã«ãªã£ã¦ã„ã‚‹ã€ŒSCAPã€ï¼ˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šå…±é€šåŒ–æ‰‹é †ï¼‰ã€ãŠã‚ˆã³ãã‚Œã‚’åŸºã«ã‚·ã‚¹ãƒ†ãƒ æ§‹æˆã‚„è„†å¼±æ€§ã®æ¤œæŸ»ã‚’è¡Œã†ãŸã‚ã®OSSãƒ„ãƒ¼ãƒ«ã€ŒOpenSCAPã€ã‚„ã€ãã®å‘¨è¾ºã®æŠ€è¡“ã€ç”¨èªžãªã©ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ä»Šå›žã¯ã€OpenSCAPã®ç’°å¢ƒã‚’æ§‹ç¯‰ã—ã€å®Ÿéš›ã«è©¦ã—ã¦ã¿ãŸã€‚ ã¾ãšã¯OpenSCAPã‚’è©¦ã—ã¦ã¿ã‚ˆã† OSSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã®ä¼šã®é¢å’Œæ¯…ã§ã™ã€‚æœ¬é€£è¼‰ã€ŒOpenSCAPã§è„†å¼±æ€§å¯¾ç–ã¯ã©ã†å¤‰ã‚ã‚‹ï¼Ÿã€ã§ã¯ã€å®Ÿè³ªçš„ã«ã‚°ãƒãƒ¼ãƒãƒ«ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã®ã€ŒSCAPï¼ˆSecurity Content Automation Protocolï¼šã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨å®šå…±é€šåŒ–æ‰‹é †ï¼‰ã€ã€ãŠã‚ˆã³ãã‚Œã‚’åŸºã«ã‚·ã‚¹ãƒ†ãƒ æ§‹æˆã‚„è„†å¼±ï¼ˆãœã„ã˜ã‚ƒãï¼‰æ€§æ¤œæŸ»ã‚’è¡Œã†ãŸã‚ã®OSSï¼ˆã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼‰ãƒ„ãƒ¼ãƒ«ã€ŒOpenSC
ra1gawa 2021/06/30
OSS

OpenSCAP

SCAP

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
1