Have you tried doing a manual install using the SCAP hardening in the install menu, and then stealing the code from the resulting anaconda.cfg that is generated in /root?

 

From: Robert Sanders [mailto:rsanders@forcepoint.com]
Sent: Friday, February 10, 2017 2:48 PM
To: scap-security-guide@lists.fedorahosted.org
Subject: EXTERNAL: Kickstart from floppy wth SCAP and tailoring

 

Hi all,

  Have a quick question - I'm looking at using a kickstart file to automate our OS install, but I also want to use the SCAP plugin to handle the initial lockdown of our images.  Looking at the 'tailoring-path' option to the anaconda plugin looks promising, but the docs indicate that the path for this option is relative to the archive being used.  Is there a way to specify the path so that it will the path from the 'floppy' image I'm using (currently booting by adding "linux ks=hd:fd0:ks.cfg"), or do I need to stand everything up as an http/https/ftp server and reference the SCAP contents and my tailoring file that way?

 

-Rob