Re: Compiled list (STIG for Debian)

["Jeremiah C. Foster" <jeremiah@freexian.com>]

On 3/2/22 12:50, Stephen Dowdy wrote:
> On 3/2/22 07:43, Paul Tagliamonte wrote:
> > STIGs are maintained by DISA, not by Debian
> >
> >    Paul
> >
> > On Wed, Mar 2, 2022 at 9:42 AM Stephanie Hall <shall@oteemo.com 
> > <mailto:shall@oteemo.com>> wrote:
> >
> >     Good morning,
> >
> >     Do you have an excel version of a STIG for Debian 9 & 10 that you 
> > would be willing to share?
> >
> >     Thank you in advance!
>
>
>
> The DISA STIGviewer (a Java app that runs just find on Debian), can 
> import a STIG  file and export to CSV
>
> https://public.cyber.mil/stigs/srg-stig-tools/
>
> However, there is no STIG specific to Debian that i'm aware of.
> Your best bet is referencing the Ubuntu ones:
>
>      U_CAN_Ubuntu_{18-04,20-04}_LTS_V......_STIG.zip

Cannot speak for it's provenance, but there's this; 
https://github.com/hardenedlinux/STIG-4-Debian

Cheers,

Jeremiah