Assessing and Monitoring Security Policy Compliance of RHEL Systems
Assessing and Monitoring Security Policy Compliance of RHEL Systems Red Hat Insights 1-latest Understanding the Security Compliance Status of your Red Hat Enterprise Linux Infrastructure Red Hat Customer Content Services
[user@insights]USD cat /etc/redhat-release dnf info scap-security-guide-0.1.57-3.el8_4 dnf install scap-security-guide-0.1.57-3.el8_4 insights-client --compliance insights-client --compliance insights-client --collector malware-detection crontab -e 10 20 * * * /bin/insights-client --compliance 10 21 * * * /bin/insights-client --collector malware-detection insights-client --compliance-policies insights-client --compliance-assign <ID>. insights-client --compliance-unassign <ID> USE [master] GO CREATE LOGIN [assessmentLogin] with PASSWORD= N'<*PASSWORD*>' ALTER SERVER ROLE [sysadmin] ADD MEMBER [assessmentLogin] GO echo "assessmentLogin" > /var/opt/mssql/secrets/assessment echo "<*PASSWORD*>" >> /var/opt/mssql/secrets/assessment chmod 0600 /var/opt/mssql/secrets/assessment chown mssql:mssql /var/opt/mssql/secrets/assessment yum -y install powershell su mssql -c "/usr/bin/pwsh -Command Install-Module SqlServer" /bin/curl -LJ0 -o /opt/mssql/bin/runassessment.ps1 https://raw.githubusercontent.com/microsoft/sql-server-samples/master/samples/manage/sql-assessment-api/RHEL/runassessment.ps1 chown mssql:mssql /opt/mssql/bin/runassessment.ps1 chmod 0700 /opt/mssql/bin/runassessment.ps1 mkdir /var/opt/mssql/log/assessments/ chown mssql:mssql /var/opt/mssql/log/assessments/ chmod 0700 /var/opt/mssql/log/assessments/ su mssql -c "pwsh -File /opt/mssql/bin/runassessment.ps1" insights-client cp mssql-runassessment.service /etc/systemd/system/ cp mssql-runassessment.timer /etc/systemd/system/ chmod 644 /etc/systemd/system/ systemctl enable --now mssql-runassessment.timer insights-client --group=<name-you-choose> tags --- group: eastern-sap name: Jane Example contact: jexample@corporate.com Zone: eastern time zone Location: - gray_rack - basement Application: SAP tags --- group: eastern-sap location: Boston description: - RHEL8 - SAP key 4: value insights-client vi /etc/insights-client/tags.yaml cat /etc/insights-client/tags.yaml group: redhat location: Brisbane/Australia description: - RHEL8 - SAP security: strict network_performance: latency insights-client