Red Hat Security: Linux in Physical, Virtual, and Cloud

Instructions

1. On the workstation machine, open a web browser and navigate to https://satellite.lab.example.com. Log in as the admin user with redhat as the password. Use the Operations organization as the default organization.

   1. From the workstation machine, open a web browser and navigate to https://satellite.lab.example.com. Accept the self-signed certificate and log in as the admin user with redhat as the password.

   2. Set Satellite Server to use the Operations organization. Navigate to Organization and select Operations.

      Note

      At some resolutions, the Organizations list displays in a sidebar menu. If the Organizations list does not display at the top, then navigate to Organizations → Operations from the sidebar menu.

2. Add the /home/student/RH415-tailoring.xml file to Satellite. Name the tailoring file compliance-customize in Satellite.

   1. In the Satellite Server web UI, navigate to Hosts → Compliance → Tailoring Files. Click New Tailoring File to add a new tailoring file.

   2. On the Upload new Tailoring File page, enter compliance-customize for the Name. Click Browse to upload the /home/student/RH415-tailoring.xml tailoring file, and then click Submit.

3. Create the compliance-customize compliance policy and use the compliance-customize tailoring file. Use the rhel9 content SCAP content. Use a monthly period with the first day of the month. Enable the scan for the org-hostgroup1 hostgroup.

   1. Navigate to Hosts → Compliance → Policies.

   2. Click New Compliance Policy.

   3. Select the Ansible radio button and click Next.

   4. Enter compliance-customize in the Name field and click Next.

   5. Select the rhel9 content value for SCAP Content and the compliance-customize value for Tailoring File, and then click Next.

   6. Select the Monthly value for Period, select the 1 value for Day of Month, and then click Next.

   7. Verify that the Default Location value is selected and click Next.

   8. Verify that the Operations value is selected and click Next.

   9. Select the org-hostgroup1 hostgroup and click Submit.

4. Execute the Ansible roles to set up the host for OpenSCAP revisions.

   1. Return to Hosts → Hosts → All Hosts and select the serverd.lab.example.com host checkbox.

   2. Click Select Action and select Run all Ansible roles from the list.

   3. Verify the results of the role execution.

5. Run an OpenSCAP scan for the serverd host.

   1. Navigate to Hosts → Hosts → All Hosts.

   2. Select the checkbox for the serverd host.

   3. Click Select Action → Schedule Remote Job.

   4. Select the OpenSCAP job category and the Run OpenSCAP scans job template, then click Run on selected hosts.

6. View and download the results of the compliance-customize OpenSCAP scan.

   1. Navigate to Hosts → Compliance → Policies.

   2. Click Dashboard for the compliance-customize policy.

   3. Click View Report for the serverd host.

   4. Browse through the results to find which rules the serverd machine is compliant with.

   5. Click Download XML in bzip to download the results.