[Open-scap] Hardening Redhawk 6.5

[Boucher, William]

Hi folks,

I've been tasked with applying the RedHat 6 STIG to several RedHawk 6.5 systems.

Running oscap should be relatively easy, to see where a base install sits initially (RedHawk is RedHat with modifications for embedded realtime use).

The RedHawk site talks about testing RedHawk performance after applying the RedHat STIG (in a white paper), but it makes no mention on how to apply it.

Applying it manually is an option, but I'd sure like to automate some.

But my question really concerns adding packages (like selinix). RedHawk discourages using yum (with the RedHat repositories) to update packages, as there may be incompatibilities between the standard packages and the RedHawk modifications to the OS.

Perhaps I should direct this question to RedHawk support, but I thought I'd ask it here first to get your input.

Thanks,

        --Bill

William B. Boucher, BSEE
Embedded Systems Software Engineer
Information Systems Security Manager
MZA Associates Corporation
4900 Lang Ave. NE, Suite 100
Albuquerque, NM 87109-9708
Phone: 505.245.9970 x166
Fax: 505.245.9971
Cell: 505.459.7620
william.boucher at mza.com<mailto:william.boucher at mza.com>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20190129/483a6db8/attachment.htm>