SupportConsoleDevelopersStart a trialContact

8.4. Remediating the System to Align with a Specific Baseline

Use this procedure to remediate the RHEL 7 system to align with a specific baseline. This example uses the Protection Profile for General Purpose Operating Systems (OSPP).

Warning

If not used carefully, running the system evaluation with the Remediate option enabled might render the system non-functional. Red Hat does not provide any automated method to revert changes made by security-hardening remediations. Remediations are supported on RHEL systems in the default configuration. If your system has been altered after the installation, running remediation might not make it compliant with the required security profile.

Prerequisites

  • The scap-security-guide package is installed on your RHEL 7 system.

Procedure

  1. Use the oscap command with the --remediate option: 
    ~]$ sudo oscap xccdf eval --profile ospp --remediate /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
  2. Restart your system.

Verification

  1. Evaluate compliance of the system with the OSPP profile, and save scan results in the ospp_report.html file: 
    ~]$ oscap xccdf eval --report ospp_report.html --profile ospp /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml

Additional Resources

  • scap-security-guide(8) and oscap(8) man pages
Red Hat logoGithubRedditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

© 2024 Red Hat, Inc.