Red Hat Security: Linux in Physical, Virtual, and Cloud

Instructions

1. On the workstation machine, open a web browser and navigate to the Hybrid Cloud Console at https://console.redhat.com/insights/. Log in with your Red Hat account. Navigate to Security → Compliance → SCAP Policies.

2. Click Create new policy.

3. Select RHEL 9 as the operating system, and filter the policy types by using the server keyword in the Policy type search field.

4. Select the CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server policy and click Next.

5. Review the policy details and click Next.

6. Select the serverd.lab.example.com system to be added to this policy, and click Next.

7. Customize the policy for the environment's needs. Select the Sudo and Updating Software rules, and click Next.

8. Review your custom policy, and click Finish

9. On the serverd machine, install the SCAP Security Guide.

   1. Log in to the serverd machine as the student user. No password is required.

      [student@workstation ~]$ ssh student@serverd
      [student@serverd ~]$

   2. Use the sudo -i command to switch identity to the root user. Use student as the password.

      [student@serverd ~]$ sudo -i
      [sudo] password for student: student
      [root@serverd ~]#

   3. Install the scap-security-guide package, which provides the SCAP Security Guide.

      [root@serverd ~]# dnf install scap-security-guide
      ...output omitted...
      Complete!

10. Run the insights-client --compliance command.

    [root@serverd ~]# insights-client --compliance
    System uses SSG version 0.1.66
    Saved tailoring file for xccdf_org.ssgproject.content_profile_cis_server_l1 to /var/tmp/oscap_tailoring_file-xccdf_org.ssgproject.content_profile_cis_server_l1.fruiolnu.xml
    Running scan for xccdf_org.ssgproject.content_profile_cis_server_l1... this may take a while
    Uploading Insights data.
    Successfully uploaded report for serverd.lab.example.com.

11. Navigate to the Security → Compliance → Reports page to view the compliance reports.

12. Click the CIS Red Hat Enterprise Linux 9 Benchmark for Level 1 - Server policy to see the report details:

13. Click serverd.lab.example.com to see the report details for this server.