In this lab, we’ll install and use openscap-scanner from the terminal. Using active remediation, we’ll run a compliance scan that will permit OpenSCAP to fix any problems it finds. Then we’ll create a report from the scan findings. Lastly, we’ll review the report findings to see what OpenSCAP found and was able to remediate.
*This course is not approved or sponsored by Red Hat.*
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Install the Necessary Packages
Become
root.sudo suInstall the OpenSCAP scanner and the SCAP security guide.
yum install -y openscap-scanner scap-security-guide
- Run a Compliance Scan with Remediation
- Use the following command to run a scan with remediation:
oscap xccdf eval --remediate --profile xccdf_org.ssgproject.content_profile_rht-ccp --results scan-results.xml /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
- Use the following command to run a scan with remediation:
- Generate a Report from the Scan Results
- Run the following command to generate a report:
oscap xccdf generate report scan-results.xml > scan-results.html
- Run the following command to generate a report:
