----- Original Message ----- > From: "Calvin Hartwell" <chart...@redhat.com> > To: open-scap-list@redhat.com > Sent: Friday, September 2, 2016 12:50:31 PM > Subject: [Open-scap] Enforcing OpenSCAP policy through kickstart (Satellite > 6 as well) ? > > Hey all, > > I've started to like the fact you can enforce a SCAP policy through the > RHEL7/CentOS7 graphical installer and I've started doing this both at work > for customers and at home (usually the Generic Cloud Policy). > > I was wondering if there is an easy way to do this through kickstart (which > could be used in Satellite 6) I.E is there a package you can install and > just pass a policy name to?
Hi, yes, there is! The OSCAP Anaconda Addon adds a new section to kickstart. See https://github.com/OpenSCAP/scap-security-guide/blob/master/RHEL/7/kickstart/ssg-rhel7-ospp-ks.cfg#L121 for an example. Just change the profile ID for another profile and you should be good to go. -- Martin Preisler Identity Management and Platform Security | Red Hat, Inc. _______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list
