On 04/29/2015 01:28 PM, leam hall wrote:
Red Hat seems to not be putting a lot of work into RHEL 5 STIG compliance. That's been one of my motivators.
EL5 dies in a year and a half or so, and has several outstanding (minor to medium) cve's presently. I'm absolutely fine with ignoring it until it goes away as well.