Keeping an eye on the security compliance of your Linux infrastructure is ever more important, and given the large number of security recommendations, coupled with the large number of Linux servers that might exist in a modern enterprise, it is clear that a tool that can audit for compliance is needed. OpenSCAP provides exactly such a framework and with a little care and attention (and application of the right security profiles) can easily audit your entire Linux estate and provide you with valuable, easy to read and interpret reports of your compliance levels.
In this chapter, you gained hands-on experience of installing OpenSCAP tools for server audit and understood the available policies and how to make effective use of them in OpenSCAP. You then learned how to audit your Linux servers with the various OpenSCAP tools, and finally explored how to interpret the scan reports...