My apologies for the ranting tone, that was not my intent; it's just been a
very frustrating transition with the SSG from RHEL6 + STIG -> RHEL7 + OSPP
since what would easily be a well-documented single-command process to
bring the first into compliance is not so clear-cut for the second.
Basically - it's more about resources available, and not much about our
agenda. And with Ansible remediations on par with bash, we should be
to fix both.
I'm all about having better, more easily maintained content. So, given the
current state of things, what is the right way to use the SSG and it's
combined ansible and bash fix content to being a RHEL7 machine into
compliance with the OSPP profile?