For those who don't know Ted Brunell, he works at RHT as a Solution Architect handling USMC and some Army elements. He created a kickstart script against SSG, sharing here with his permission.
Thanks, Ted!
-------- Original Message -------- Subject: Kickstart with SSG/fixes and More Date: Fri, 27 Sep 2013 15:24:15 -0400 (EDT) From: Ted Brunell tbrunell@redhat.com To: Shawn Wells swells@redhat.com
I thought you'd like to see this. I used SSG inside of a kickstart and found that I had a way to go to get close to 100%. I did a bunch of sed scripting but am still only hitting 86.67%. Lots of false hits particularly with /etc/audit/audit.rules settings. Somethings like GNOME settings fail even though GNOME is not installed. Seems like it should detect GNOME and pass if the setting cannot be set.
Kickstart and before/after SSG reports are attached.
R/ Ted
Ted Brunell - RHCDS, RHCE, RHCVA Senior Solution Architect Red Hat, Inc. (c) 760-712-6837 tbrunell@redhat.com
scap-security-guide@lists.fedorahosted.org