Re: [Open-scap] question on addon_fedora_oscap

2018-10-04 Thread Robert Sanders
Another option, and one we're using right now for generating a production installation ISO, is to do apply the profile near the end of the %post section in our kickstart. -Rob -- ROBERT SANDERS Sr. Secure Systems Engineer FORCEPOINT T +1.703.896.4762 F +1.703.318.5041 www.forcepoint.com

[Open-scap] Comparing openSCAP content across versions

2018-06-19 Thread Robert Sanders
-rhel7-disa' content. If nothing else it may be a useful sanity checker for comparing versions. Sincerely, Rob Sanders Robert Sanders Sr. Secure Systems Engineer FORCEPOINT T +1.703.896.4762 F +1.703.318.5041 www.forcepoint.com FORWARD WITHOUT FEAR Comparing (/home/rob/rh73_xccdf.xml

Re: [Open-scap] SCAP customizations and OS migrations

2018-06-03 Thread Robert Sanders
at some point? Sincerely, Rob Sanders Robert Sanders Sr. Secure Systems Engineer FORCEPOINT T +1.703.896.4762 F +1.703.318.5041 www.forcepoint.com FORWARD WITHOUT FEAR From: Marek Haicman [mhaic...@redhat.com] Sent: Friday, June 01, 2018 3:19 PM To: open

[Open-scap] SCAP customizations and OS migrations

2018-05-17 Thread Robert Sanders
'profiles' (with or without customization) to see the differences between them? Or even load a base profile and have the customizations highlighted? -Rob Robert Sanders Sr. Secure Systems Engineer FORCEPOINT T +1.703.896.4762 F +1.703.318.5041 www.forcepoint.com FORWARD WITHOUT FEAR

Re: [Open-scap] Kickstart with SCAP tailoring

2017-02-16 Thread Robert Sanders
[rspruden...@redhat.com] Sent: Thursday, February 16, 2017 10:08 AM To: Robert Sanders; open-scap-list@redhat.com Subject: EXTERNAL: Re: [Open-scap] Kickstart with SCAP tailoring No, I mean double dashes (--), in your command it looks like you're using tailoring-file instead of --tailoring-file. On 02/16

Re: [Open-scap] Kickstart with SCAP tailoring

2017-02-16 Thread Robert Sanders
of the kickstart. What I have here 'works' - in that it didn't raise an error. -Rob From: Raphael Sanchez Prudencio [rspruden...@redhat.com] Sent: Thursday, February 16, 2017 9:48 AM To: Robert Sanders; open-scap-list@redhat.com Subject: EXTERNAL: Re: [Open-scap

[Open-scap] Kickstart with SCAP tailoring

2017-02-10 Thread Robert Sanders
Morning all, Have a quick question - I'm looking at using a kickstart file to automate our OS install, but I also want to use the SCAP plugin to handle the initial lockdown of our images. Looking at the 'tailoring-path' option to the anaconda plugin looks promising, but the docs indicate