Ah, this is an interesting point. I might be first interested in seeing generation of a kickstart %post script from the remediation content here, but this is definitely worth considering.
Related: do we have a handle on how many changes are needed from a default RHEL installation?
On Mon, Sep 16, 2013 at 7:41 AM, Leam Hall leamhall@gmail.com wrote:
Shawn,
One of the things I'm doing with Aqueduct is ensuring that we make backup copies of files. This is something my user base has strongly requested and their concerns are valid; if we run a fix tool with hundreds of changes, and the server looses functionality, being able to quickly see what was changed and fix/revert becomes critical.
Leam
-- http://31challenge.net http://31challenge.net/insight _______________________________________________ scap-security-guide mailing list scap-security-guide@lists.fedorahosted.org https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide