[squid-users] WebServer-SRG or Application SRG for Squid?

[Eliezer Croitor]

OK, so..

The protocols 100% require a proper QA for something.

Currently from what I understand the Squid-Cache project doesn’t take “fast steps” since it’s trying to be RFC compatible.

Also the project has couple guide lines about new features so it’s striving to stay as “Stable” as possible.

 

I think that for CentOS X there should be a proper packaging and a proper way to be able to roll forward and back versions.

(since packaging for CentOS 7 is kind of my domain for a while)

 

I do not what are the requirements are there for a system to stay compliance with regulation but my assumption is that a basic:

Configuration “code” management should be in place.

Any other hints?

 

Elileze

 

----

Eliezer Croitoru

Tech Support

Mobile: +972-5-28704261

Email: ngtech1ltd at gmail.com <mailto:ngtech1ltd at gmail.com> 

 

From: Leonard Humphries CW <lhumphries.cw at mmm.com> 
Sent: Tuesday, August 11, 2020 10:11 AM
To: Eliezer Croitor <ngtech1ltd at gmail.com>
Cc: squid-users at lists.squid-cache.org
Subject: Re: RE: [squid-users] WebServer-SRG or Application SRG for Squid?

 

STIG stands for Secure Technical Implementation Guide. It’s the standard  by which the DoD and other government entities measure whether a system, application, etc is in compliance with their protocols. SRG stands for Security Requirements Guides. They are both way for implementing security changes to your systems to keep them secure and compliant. 

Leonard Humphries 

 





On Aug 11, 2020, at 2:58 AM, Eliezer Croitor <ngtech1ltd at gmail.com <mailto:ngtech1ltd at gmail.com> > wrote:

 

Hey Leonard,

 

Can you clarify what do you mean by STIGing and SRG etc..

What are you trying to achieve?

Plain text might make more sense to these who doesn’t understand these terms.

 

Thanks,

Eliezer

 

----

Eliezer Croitoru

Tech Support

Mobile: +972-5-28704261

Email: ngtech1ltd at gmail.com <mailto:ngtech1ltd at gmail.com> 

 

From: squid-users <squid-users-bounces at lists.squid-cache.org <mailto:squid-users-bounces at lists.squid-cache.org> > On Behalf Of Leonard Humphries CW
Sent: Tuesday, August 11, 2020 9:02 AM
To: squid-users at lists.squid-cache.org <mailto:squid-users at lists.squid-cache.org> 
Subject: [squid-users] WebServer-SRG or Application SRG for Squid?

 

I have a task of STIGing Squid on CentOS7.  Does anyone have recommended STIG checklists or SRG’s for Squid on CentOS7? Also, It is my understanding that if Squid isn’t utilizing caching , then it might be better to use the Application SRG instead of the Webserver SRG. Does anyone have any insight to this?

 

Leonard Humphries

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20200811/92e9d9b6/attachment-0001.htm>