RedHatOfficial.rhel8-ospp

Protection Profile for General Purpose Operating Systems

Ansible Role for Protection Profile for General Purpose Operating Systems

Profile Description:
This profile includes mandatory configuration controls outlined in the NIAP Configuration Annex for General Purpose Operating Systems (Version 4.2.1). It aligns with CNSSI-1253, which requires U.S. National Security Systems to follow specific configuration guidelines. Hence, this profile is appropriate for use in U.S. National Security Systems.

The tasks in this role are created using OpenSCAP. For more information on how to generate Ansible playbooks, visit OpenSCAP project.

If you want to report a problem or suggest an improvement for an Ansible task that is not working or is missing, check out the ComplianceAsCode project at ComplianceAsCode.

Requirements:

• Ansible version 2.9 or higher.

Role Variables: To customize this role, refer to the list of variables.

Dependencies:

• None.

Example Role Usage: To download and install the role, run:
ansible-galaxy install RedHatOfficial.rhel8_ospp
You can then use this playbook snippet to run the role:

- hosts: all
  roles:
     - { role: RedHatOfficial.rhel8_ospp }

Next, check the playbook on your localhost with the following command:

ansible-playbook -i "localhost," -c local --check playbook.yml

To apply the playbook (this may change your local machine's configuration!):

ansible-playbook -i "localhost," -c local playbook.yml

License:

• BSD-3-Clause

Author Information: This Ansible role was created based on security policies developed by the ComplianceAsCode project. For an updated list of authors and contributors, please visit Contributors.