Mastering Linux Security and Hardening - Second Edition

Applying OpenSCAP policies with oscap

The Security Content Automation Protocol (SCAP) was created by the US National Institute of Standards and Technology (NIST). It consists of hardening guides, hardening templates, and baseline configuration guides for setting up secure systems. OpenSCAP is a set of FOSS tools that can be used to implement SCAP. It consists of the following:

• Security profiles that you can apply to a system. There are different profiles for meeting the requirements of several different certifying agencies.
• Security guides to help with the initial setup of your system.
• The oscap command-line utility to apply security templates.
• On systems that have a desktop interface, you have SCAP Workbench, a GUI-type utility.

You can ...