October 2012 - SCAP-On-Apple - lists.macosforge.org

where may I find SCAP content for OS/X 10.8 Mountain Lion? is is on the DISA site?
by Jacob, Raymond A Jr. CIV SPAWARSYSCEN-ATLANTIC, 58830 31 Oct '12

31 Oct '12

Thank you R"aymond

2 1

Re: [SCAP-On-Apple] [Fed-Talk] iOS 6 STIG
by Luis Nunez 31 Oct '12

31 Oct '12

recently the http://scap-on-apple.macosforge.org/ site came online. I've not seen activity since the meeting in early this month. For reference here is the NSA SCAP content: http://www.nsa.gov/ia/mitigation_guidance/security_configuration_guides/ope… -ln On Oct 30, 2012, at 5:36 PM, David Solin wrote: > Is there no plan for automated content, like the NSA produced? > > On 10/30/2012 10:46 AM, Luis Nunez wrote: >> DISA draft Apple iOS 6 Security Technical Implementation Guide for comment. >> >> http://iase.disa.mil/stigs/net_perimeter/wireless/smartphone.html#iOS6 >> >> >> -ln >> _______________________________________________ >> Do not post admin requests to the list. They will be ignored. >> Fed-talk mailing list (Fed-talk(a)lists.apple.com) >> Help/Unsubscribe/Update your Subscription: >> https://lists.apple.com/mailman/options/fed-talk/david%40joval.org >> >> This email sent to david(a)joval.org > > > -- > jOVAL.org: SCAP Simplified. > Learn More | Features | Download > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Fed-talk mailing list (Fed-talk(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/fed-talk/lnunez%40c3isecurity.com > > This email sent to lnunez(a)c3isecurity.com

1 0

Re: [SCAP-On-Apple] [Fed-Talk] iOS 6 STIG
by Luis Nunez 31 Oct '12

31 Oct '12

I agree. They look contradictory. below are the sections that looks contradictory. Taken from the "U_Apple_iOS_6_V1R0_1_Overview.pdf". 2.13 Tethered Modem Use An iPhone and iPad can be used as an “IP” modem or a “tethered modem” to provide a wireless Internet connection for a laptop computer or other device, such a Wi-Fi only iPad. In most cases, this is less expensive than buying a broadband wireless card and setting up a separate broadband wireless account. This use is permitted in DoD. Note that most wireless carriers disable the capability for using an iOS device to directly set up a tethered connection to a laptop via an Internet connection, requiring subscribers to pay an additional fee to acquire “tethered” service. Procedures for setting up IP modem service on a laptop are available from each wireless carrier. 2.14 Personal Hotspot An iOS 6 device can be set up as a personal cellular hotspot where laptops, smartphones, or tablet devices can connect to the device via a Wi-Fi, Bluetooth, or USB connection and access the Internet via the iPhone or iPad cellular connection. This configuration is not authorized in DoD because the native iOS encryption supporting Wi-Fi is not FIPS-validated. btw I am ccing the scap-on-apple list for automation perspective. -ln On Oct 31, 2012, at 9:00 AM, STEMPNAKOWSKI, DAVID A MSgt USAF AETC AETC/A6OI wrote: > Before I make a comment on the comment matrix and possibly make myself look > stupid, does section 2.13 and 2.14 seem to contradict themselves? I > understand the difference between "tethered" and "hotspot" but I'm not aware > of how to use an iPhone or iPad connected via a USB cable as a tethered > modem. I'm more familiar with that config over WiFi or Bluetooth. > > > David A. Stempnakowski, MSgt, USAF > AETC/A6OI > NCOIC, Network Infrastructure > AETC Software Benefits Administrator > DSN 487-7513 Comm 652-7513 > > > -----Original Message----- > From: fed-talk-bounces+david.stempnakowski=us.af.mil(a)lists.apple.com > [mailto:fed-talk-bounces+david.stempnakowski=us.af.mil@lists.apple.com] On > Behalf Of Luis Nunez > Sent: Tuesday, October 30, 2012 10:46 AM > To: fed-talk(a)lists.apple.com > Subject: [Fed-Talk] iOS 6 STIG > > DISA draft Apple iOS 6 Security Technical Implementation Guide for comment. > > http://iase.disa.mil/stigs/net_perimeter/wireless/smartphone.html#iOS6 > > > -ln > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Fed-talk mailing list (Fed-talk(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/fed-talk/david.stempnakowski%40us.af > .mil > > This email sent to david.stempnakowski(a)us.af.mil

1 0

Draft iOS 6 STIG
by Luis Nunez 29 Oct '12

29 Oct '12

fyi, DISA released a Draft Apple iOS 6 STIG. The technical interchange meeting(call) will take place on 15 November. Submit comments before the call. http://iase.disa.mil/stigs/net_perimeter/wireless/smartphone.html#iOS6 -ln

1 0

Where/When do we start?
by Link, Peter R. 09 Oct '12

09 Oct '12

Now that the SCAP on Apple working group has been created, I would like to know if any initial guidelines were discussed at the BoF meeting. Who's going to start? With what configuration information? Will this site be the primary working area for SCAP content for Apple (OSX and iOS)? Will people still use OVAL's repository for Apple products as the primary source or duplicate content between the two? I know some work has been done by various people. Will any of that be submitted to this site or is everything starting from the ground up? **** Not that anyone has asked but my ultimate goal for this project is to provide complete SCAP content for tools (including OCIL) necessary to create, validate, and remediate a USGCB baseline configuration for OSX and secondarily, for iOS. This is a multistep process but having a USGCB configuration has been on my list for many years. Peter Link Cyber Security Analyst Cyber Security Program Lawrence Livermore National Laboratory PO Box 808, L-315 Livermore, CA 94551-0808 link1(a)llnl.gov<mailto:link1@llnl.gov> The contents of this message are mine personally and do not reflect the views or position of the U.S. Department of Energy, Federal Government, National Nuclear Security Administration, Lawrence Livermore National Security, or Lawrence Livermore National Laboratory.

1 0