Fwd: Kickstart with SSG/fixes and More

Shawn Wells shawn at redhat.com
Fri Sep 27 19:33:31 UTC 2013


For those who don't know Ted Brunell, he works at RHT as a Solution 
Architect handling USMC and some Army elements. He created a kickstart 
script against SSG, sharing here with his permission.


Thanks, Ted!


-------- Original Message --------
Subject: 	Kickstart with SSG/fixes and More
Date: 	Fri, 27 Sep 2013 15:24:15 -0400 (EDT)
From: 	Ted Brunell <tbrunell at redhat.com>
To: 	Shawn Wells <swells at redhat.com>



I thought you'd like to see this.  I used SSG inside of a kickstart and found that I had a way to go to get close to 100%.  I did a bunch of sed scripting but am still only hitting 86.67%.  Lots of false hits particularly with /etc/audit/audit.rules settings.  Somethings like GNOME settings fail even though GNOME is not installed.  Seems like it should detect GNOME and pass if the setting cannot be set.

Kickstart and before/after SSG reports are attached.

R/
Ted

Ted Brunell - RHCDS, RHCE, RHCVA
Senior Solution Architect
Red Hat, Inc.
(c) 760-712-6837
tbrunell at redhat.com




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ks.cfg
Type: application/octet-stream
Size: 14679 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0001.obj>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0004.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0005.html>


More information about the scap-security-guide mailing list