8.4. Remediating the System to Align with a Specific Baseline
8.4. Remediating the System to Align with a Specific Baseline Use this procedure to remediate the RHEL 7 system to align with a specific baseline. This example uses the Protection Profile for General Purpose Operating Systems (OSPP). Warning If not used carefully, running the system evaluation with the Remediate option enabled might render the system non-functional. Red Hat does not provide any automated method to revert changes made by security-hardening remediations. Remediations are supported on RHEL systems in the default configuration. If your system has been altered after the installation, running remediation might not make it compliant with the required security profile. Prerequisites The scap-security-guide package is installed on your RHEL 7 system. Procedure Use the oscap command with the --remediate option: Restart your system. Verification Evaluate compliance of the system with the OSPP profile, and save scan results in the ospp_report.html file: Additional Resources scap-security-guide(8) and oscap(8) man pages
~]USD sudo oscap xccdf eval --profile ospp --remediate /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml ~]USD oscap xccdf eval --report ospp_report.html --profile ospp /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml