Re: [Open-scap] RHEL 7 GRUB2 boot password

2018-01-24 Thread Dan White
"superusers should be root, admin or administrator" Are you sure it shouldn't be "superusers should NOT be root, admin or administrator" ? I changed mine from "root" to "grub.root", made sure the full hash was in /etc/grub.d/01_users, re-ran grub2-mkconfigĀ  and then the oscap scan passed.

Re: [Open-scap] RHEL 6 - rsyslog vs rsyslog7

2018-01-24 Thread Dan White
In RHEL 6, yes In RHEL 7, they are already on rsyslog 8 Can the check look for either ? Dan White | d_e_wh...@icloud.com ā€œSometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried

Re: [Open-scap] Open SCAP on Ubuntu

2018-01-24 Thread Jan Cerny
Hi, Unfortunately, scap-workbench was introduced in Ubuntu 17.04, so it is not available in 16.04. In ubuntu 16.04 you can use still command-line tool oscap, which is found in package libopenscap8. But there is old OpenSCAP 1.2.8. I don't expect Ubuntu people will update packages in LTS