Chapter 7. Configuring SCAP contents

Procedure

1. Access the SCAP Security Guide in the package browser.
2. From the Version menu, select the latest SSG version for the minor version of RHEL that your hosts are running. For example, for RHEL 8.6, select a version named *.el8_6.
3. Download the package RPM.

4. Extract the data-stream file (*-ds.xml) from the RPM. For example:

   $ rpm2cpio scap-security-guide-0.1.69-3.el8_6.noarch.rpm \
   | cpio -iv --to-stdout ./usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml \
   > ssg-rhel-8.6-ds.xml

5. Upload the data stream to Satellite. For more information, see Section 7.3, “Uploading additional SCAP content”.

Procedure

1. In the Satellite web UI, navigate to Hosts > Compliance > SCAP contents.
2. Click Upload New SCAP Content.
3. Enter a title in the Title text box, such as My SCAP Content.
4. In Scap File, click Choose file, navigate to the location containing a SCAP data-stream file and click Open.
5. On the Locations tab, select locations.
6. On the Organizations tab, select organizations.
7. Click Submit.

CLI procedure

1. Place the SCAP data-stream file to a directory on your Satellite Server, such as /usr/share/xml/scap/my_content/.

2. Run the following Hammer command on Satellite Server:

   # hammer scap-content bulk-upload --type directory \
   --directory /usr/share/xml/scap/my_content/ \
   --location "My_Location" \
   --organization "My_Organization"

Procedure

1. In the Satellite web UI, navigate to Hosts > Compliance > Tailoring Files and click New Tailoring File.
2. Enter a name in the Name text box.
3. Click Choose File, navigate to the location containing the tailoring file and select Open.
4. Click Submit to upload the chosen tailoring file.