inspec-profile-disa_stig-el7
inspec-profile-disa_stig-el7 copied to clipboard
Shouldn't old STIG controls be removed/deprecated?
It appears this version of the profile is written to STIG V1R4, but according to the STIG revision history controls V-71895 and V-72435 were removed in V1R4, and V-72181 was removed in V1R2.
To avoid confusion, shouldn't these be removed? U_Red_Hat_Enterprise_Linux_7_V1R4_Revision_History.pdf
This should be handled by PR https://github.com/simp/inspec-profile-disa_stig-el7/pull/114.
Why are we still referring to the v1rX STIG? We are talking about Red Hat Enterprise Linux, yes? Version 2 of the STIG has been available since mid 2018 and many controls have been removed or modified.