[DRAFT] DISA STIG for Red Hat Virtualization Host (RHVH)

Ansible Role for [DRAFT] DISA STIG for Red Hat Virtualization Host (RHVH)

Profile Description:
This draft profile includes configuration checks that follow the
DISA STIG for Red Hat Virtualization Host (RHVH).

The tasks in this role are created using OpenSCAP.
For more information on generating Ansible playbooks with OpenSCAP, visit https://github.com/OpenSCAP/openscap.

To report a problem or suggest improvements for an Ansible task that doesn't work or is missing, please check the ComplianceAsCode project at https://github.com/ComplianceAsCode/content.

Requirements

• Ansible version 2.5 or higher

Role Variables

You can customize the role by looking at the list of variables.

Dependencies

Not applicable.

Example Playbook

To download and install the role, run ansible-galaxy install RedHatOfficial.rhv4_rhvh_stig. After that, use the following playbook snippet to run the Ansible role:

- hosts: all
  roles:
     - { role: RedHatOfficial.rhv4_rhvh_stig }

Then, you can check the playbook on your local machine with this command:

ansible-playbook -i "localhost," -c local --check playbook.yml

To actually execute it (this might change settings on your local machine):

ansible-playbook -i "localhost," -c local playbook.yml

License

BSD-3-Clause

Author Information

This Ansible remediation role is based on the security policies created by the ComplianceAsCode project. For a current list of authors and contributors, visit https://github.com/complianceascode/content/blob/master/Contributors.md.