On 9/5/18 6:20 AM, Dhanushka Parakrama wrote:
Hi Team

I  Wanted to remove the few service checks from the profile *xccdf_org.ssgproject.content_profile_anssi_np_nt28_high (Eg: Ensure /tmp Located On Separate Partition , *xccdf_org.ssgproject.content_rule_partition_for_tmp ) and build new *ssg-centos6-ds.xml* check file how can i do that ?

That's a common use case! Consider evaluating SCAP Workbench. It's a GUI tool to tailor what rules are enabled/disabled in your security profile.

Homepage:
https://www.open-scap.org/tools/scap-workbench/

Blog "Customizing SCAP Security Guide for your use-case <https://www.open-scap.org/resources/documentation/customizing-scap-security-guide-for-your-use-case/>" by Jan Cerny is a good place to start!
_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to