Chapter 11:System Security Profiles with OpenSCAP

SCAP stands for Security Content Automation Protocol, a standardized way to check, verify, and report vulnerability assessment and policy assessment. Red Hat Enterprise Linux (RHEL) 8 includes the tool OpenSCAP, and profiles to audit and manage the security in the systems. This helps ensure the systems you are managing comply with standard security policies such as the Payment Card Industry Data Security Standard (PCI DSS) or the Protection Profile for General Purpose Operating Systems, or Operating System Protection Profile (OSPP) for short, as well as discovering vulnerabilities.

RHEL 8 includes this tool to review security profiles in order to discover possible attack vectors (misconfigurations or vulnerabilities) and can obtain guidance on how to better harden the system. We will learn how to perform a scan on a system, and discover what needs to be changed to prepare it, in order to ensure it is completely aligned with the regulatory...