Fwd: Kickstart with SSG/fixes and More
Shawn Wells
shawn at redhat.com
Fri Sep 27 19:33:31 UTC 2013
For those who don't know Ted Brunell, he works at RHT as a Solution
Architect handling USMC and some Army elements. He created a kickstart
script against SSG, sharing here with his permission.
Thanks, Ted!
-------- Original Message --------
Subject: Kickstart with SSG/fixes and More
Date: Fri, 27 Sep 2013 15:24:15 -0400 (EDT)
From: Ted Brunell <tbrunell at redhat.com>
To: Shawn Wells <swells at redhat.com>
I thought you'd like to see this. I used SSG inside of a kickstart and found that I had a way to go to get close to 100%. I did a bunch of sed scripting but am still only hitting 86.67%. Lots of false hits particularly with /etc/audit/audit.rules settings. Somethings like GNOME settings fail even though GNOME is not installed. Seems like it should detect GNOME and pass if the setting cannot be set.
Kickstart and before/after SSG reports are attached.
R/
Ted
Ted Brunell - RHCDS, RHCE, RHCVA
Senior Solution Architect
Red Hat, Inc.
(c) 760-712-6837
tbrunell at redhat.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ks.cfg
Type: application/octet-stream
Size: 14679 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0001.obj>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0004.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130927/c833cf2b/attachment-0005.html>
More information about the scap-security-guide
mailing list