Certification against DISA STIG is a precondition for deployment in environments governed by it. For a minimal distribution with an immutable system, though, many rules written for a classic server cannot be taken over word for word.
Scope
- Working with the security team on the STIG set for SLE Micro.
- SLE Micro architecture from the certification point of view – what the system contains, what changes and what is immutable.
- Adapting the tests so they verify the rules on a system that behaves differently from a regular installation.
- Mitigations where a rule cannot be met directly.
- Judging applicability of individual rules – which ones apply to the system and which do not, and why.