Does anyone know where to find a STIG viewer for Linux?
As in Security Technical Implementation Guide. This is a DISA thing that requires a special viewer. I don’t think a reader for Linux exists but I thought I’d take a shot.
@fecklesstech WIll this help ?
I found the zip file but I don’t know what to do with it. I was hoping I could find a STIG viewer already packaged.
https://archlinux.org/packages/extra/x86_64/unzip/
As I am not proffesional in the specified field, but according to your words I can try to help.
The above mentioned package is for unzipping zip files.
My bad. I should’ve been more concise. I can unzip it. I just don’t understand the contents. Fortunately I found a STIG viewer .deb package on GitHub. Unfortunately debtap rendered a tar.zst package that won’t install on EOS. I’ll try the .deb package on my Mint system when I get home from work. Cheers.
A document about cyber security that requires windoze to read it.
Ironic.
2 Likes
DISA customers don’t use stock Windoze. They use a hardened version called SDC (Standard Desktop Configuration). It’s W10 pro with the spyware disabled and STIGed beyond recognition. Too bad the rest of us can’t use SDC.
Sounds like a bunch of gobbledygook to me:
– SDC DISA STIG W10!!1!
– Quickly now, call the ambulance! This man is having a stroke!
1 Like
Sorry about the alphabet soup. DISA is the Defense Information Systems Agency. DISA STIGs are lists of recommended security and privacy settings for operating systems and applications. For reasons I don’t understand you have to install a special viewing app to read them. This is easy for Windows users. For Linux it’s going to take a little research.
Download this https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_STIGViewer_2-16_Linux.zip unzip it. Open a terminal in the unzipped folder. Then simply run ./STIGViewer . It is designed as an extremely portable self contained application. It is not distro specific. I would not use a download from anywhere else if it matters, i.e. job related.
1 Like
Thanks! That solved my problem. Now I just need to try it out in my classroom.
BTW, I tried the .deb STIG viewer (stig_2.0.0_amd64.deb) on MX and it installed normally but wouldn’t open any STIGs. I don’t know what’s wrong with it.
Literally if it ain’t on this page https://public.cyber.mil/stigs/stig-viewing-tools/ then it is unofficial, and cannot be used for “real” work. With that in mind, it could be a number of different items that are breaking it, from the java environment to a missing library. Since 2019 the standalone app is the recommended method to use the viewer and all future development is being done with purely opensource projects.
2 Likes