Red Hat Security: Linux in Physical, Virtual, and Cloud
This course is now legacy content
This course is using an outdated version of the technology and is now considered to be Legacy content. It will be removed from our catalog on June 28, 2024. Please be sure to complete your course and finish any remaining labs before that date. We recommend moving to version 9.2, which is the latest version currently available.
In this chapter, you learned:
The openscap-scanner and scap-security-guide packages must be installed on the system to scan for compliance.
You use SCAP Workbench to explore and customize the policies provided by the SCAP Security Guide.
The oscap xccdf eval command is used to scan systems for compliance, using a data stream file, a profile, and optionally a tailoring file containing local customizations.
The oscap generate fix command can be used to generate an Ansible Playbook from a profile or a scan result XML file, which can be used to apply remediations.
