home.social

#openscap — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #openscap, aggregated by home.social.

  1. Zum aktuellen Linux-Magazin 04/26 durfte ich neben dem zweiten Artikel über Patch-Management mit #Uyuni (linux-magazin.de/ausgaben/2026) auch Informationen zum Thema #OpenSCAP beitragen.

    👉🏻 linux-magazin.de/ausgaben/2026

    In diesem Artikel werden die Grundlagen des Frameworks erklärt - anhand von Praxisbeispielen wird das Auditieren und automatische Abhärten geschildert.

    #Linux #Security

  2. Oh! It's been a while since I commented on #RedHat #ImageBuilder / #osbuild :D Let's correct that.

    It's absolute awesome how you can set an #OpenSCAP profile directly in the blueprint. It's also completely useless :) It always performs both an evaluation and remediation step, with no option to turn the remediation off, or to supply a tailored profile with added or excluded tests.

    I can't imagine many images being built that don't have some form of post-processing, so running remediation beforehand is either just unwanted or worse, changes things that shouldn't be changed.

    Now, I do really mean that the intention is awesome. I just think there weren't too many actual users offering input :) So, this is mine - please take it as constructive criticism.