Has anyone here found the best way to STIG a version of RHEL 6.x automatically? The other answers I have found are either out of date or do not completely STIG the machine. Even an image that has a STIG of RHEL will help.
STIG (Security Technical Implementation Guides) automation
rhel;security;configuration
This project sounds like what you're looking for, titled: stig-fix-el6. excerptDISA STIG Scripts to harden a system to the RHEL 6 STIG.These scripts will harden a system to specifications that are based  upon the the following previous hardening  provided by the following  projects:    DISA RHEL 6 STIG V1 R2    http://iase.disa.mil/stigs/os/unix/red_hat.html    NIST 800-53 (USGCB) Content for RHEL 5    http://usgcb.nist.gov/usgcb/rhel_content.html    NSA SNAC Guide for Red Hat Enterprise Linux 5    http://www.nsa.gov/ia/_files/os/redhat/NSA_RHEL_5_GUIDE_v4.2.pdf    Aqueduct Project    https://fedorahosted.org/aqueduct    Tresys Certifiable Linux Integration Platform (CLIP)    http://oss.tresys.com/projects/clipThe contents of the project includes the following scripts:apply.sh - master script that runs scripts in cat1-cat4 and misctoggle_ipv6.sh - toggles IPv6 support, requires reboot (default is off)toggle_nousb.sh - toggles the 'nousb' kernel flag onlytoggle_udf.sh - toggles 'udf' mounting of DVDs (USGCB Blacklists udf) toggle_usb.sh - toggles 'nousb' kernel flag and the mass storage kernel                 module config - Directory with some pre-STIGed                 configurations (auditd,iptables,system-auth-local,etc.) cat1 - CAT I STIG Scriptscat2 - CAT II STIG Scriptscat3 - CAT III STIG Scriptscat4 - CAT IV STIG Scriptsmisc - NSA SNAC, GNOME, and Other miscellenous lockdown scriptsmanual - Manaully run (There be dragons here)backups - Backup copy of modified files to compare and restore configurations