8.10. Assessing Configuration Compliance of a Container or a Container Image with a Specific Baseline

Procedure

1. Find the ID of a container or a container image, for example:

   ~]# docker images
   REPOSITORY                            TAG      IMAGE ID       CREATED       SIZE
   registry.access.redhat.com/ubi7/ubi   latest   096cae65a207   7 weeks ago   239 MB

   Copy to Clipboard Toggle word wrap
2. Evaluate the compliance of the container image with the OSPP profile and save scan results in the report.html HTML file.

   ~]$ sudo oscap-docker 096cae65a207 xccdf eval --report report.html --profile ospp /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml

   Copy to Clipboard Toggle word wrap
   Replace 096cae65a207 with the ID of your container image and the ospp value with pci-dss if you assess configuration compliance with the PCI-DSS baseline.

Verification

1. Check the results in a browser of your choice, for example:

   ~]$ firefox report.html &

   Copy to Clipboard Toggle word wrap