In SCAP Workbench, After selecting the profile (in my case, DISA STIG for RHEL 7), click the "Customize" button to the right on the profile selection pulldown. This opens up a new window, where you can click on checkboxes to the left of listed controls to either add checks of those controls (put check in checkbox) or remove them (remove check in checkbox). When things are customized to your specifications click "OK" and you will see the string "(CUSTOMIZED)" added to the selected profile. You can now save the customization in a tailoring file via the " File->Save Customization Only" pulldown (so you can load it again later or use it in a command-line oscap call). Now when you run the scan your customizations will be applied.
William B. Boucher, BSEE Embedded Systems Software Engineer Information Systems Security Manager MZA Associates Corporation 4900 Lang Ave. NE, Suite 100 Albuquerque, NM 87109-9708 Phone: 505.245.9970 x166 Fax: 505.245.9971 Cell: 505.459.7620 william.bouc...@mza.com<mailto:william.bouc...@mza.com> From: open-scap-list-boun...@redhat.com [mailto:open-scap-list-boun...@redhat.com] On Behalf Of Shawn Wells Sent: Tuesday, June 25, 2019 10:09 AM To: open-scap-list@redhat.com Subject: Re: [Open-scap] Wish to disable check or remediation of STIG rules to remove X Windows and to use smart card On 6/25/19 11:36 AM, Boucher, William wrote: I figured it out! That's great! To help others down the road who may have a similar issue, what was the fix?
_______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list
