On 9/5/18 6:20 AM, Dhanushka Parakrama wrote:
Hi Team
I Wanted to remove the few service checks from the profile
*xccdf_org.ssgproject.content_profile_anssi_np_nt28_high (Eg: Ensure
/tmp Located On Separate Partition ,
*xccdf_org.ssgproject.content_rule_partition_for_tmp ) and build new
*ssg-centos6-ds.xml* check file how can i do that ?
That's a common use case! Consider evaluating SCAP Workbench. It's a GUI
tool to tailor what rules are enabled/disabled in your security profile.
Homepage:
https://www.open-scap.org/tools/scap-workbench/
Blog "Customizing SCAP Security Guide for your use-case
<https://www.open-scap.org/resources/documentation/customizing-scap-security-guide-for-your-use-case/>"
by Jan Cerny is a good place to start!
_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list