-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
2 changed files
with
11 additions
and
13 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,23 +1,24 @@ | ||
--- | ||
order: 07 | ||
title: 7. Additional Technical Details | ||
title: 7. Additional Technical Details and Resources | ||
author: Daniel Medina, George Dias | ||
--- | ||
|
||
## 7.1 Additional Technical Details | ||
|
||
- **Download New Guidance:** Download the appropriate profile from the [DISA Document Library](https://public.cyber.mil/stigs/downloads/). Unzip the downloaded folder and identify the `<name>xccdf.xml` file. | ||
- **Create the InSpec Profile JSON File:** Clone or download the InSpec profile locally. Run the `inspec json` or `cinc-auditor json` command to create the InSpec Profile JSON file to be used in the `saf generate delta` command. | ||
|
||
### update_controls4delta process | ||
### 7.1.1 Update Controls Process | ||
|
||
![update_controls4delta process](../../assets/img/update_controls4delta_diagram.png) | ||
![Update Controls Process Diagram](../../assets/img/update_controls4delta_diagram.png) | ||
|
||
### delta Process | ||
### 7.1.2 Delta Process | ||
|
||
![Delta Workflow Process](../../assets/img/delta_diagram.png) | ||
![Delta Workflow Process Diagram](../../assets/img/delta_diagram.png) | ||
|
||
### Scope of Changes by Delta | ||
### 7.2 Scope of Changes by Delta | ||
|
||
Delta does not modify the Ruby/InSpec code within the control, leaving it intact. Instead, it replaces the 'control metadata' using the content from the supplied XCCDF guidance document. This applies to controls that map from baseline X to baseline Y. | ||
|
||
## 7.2 Additional Resources | ||
|
||
- **Download New Guidance:** Download the appropriate profile from the [DISA Document Library](https://public.cyber.mil/stigs/downloads/). Unzip the downloaded folder and identify the `<name>xccdf.xml` file. | ||
- **Create the InSpec Profile JSON File:** Clone or download the InSpec profile locally. Run the `inspec json` or `cinc-auditor json` command to create the InSpec Profile JSON file to be used in the `saf generate delta` command. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters