Red Hat Satellite 6.3 introduces the ability to upload and use tailoring files to customize existing OpenSCAP policies. A new section must be added to the Host Configuration Guide below the 'Managing Compliance Policies' section that provides the following details - * An introduction to the section that describes what tailoring files are, and includes a link to the instructions on how to create them. * A procedure that outlines how to upload them to Satellite Server. * A procedure that outlines how to apply them to a policy.
Added engineering tracker to the 'depends' list. Added external tracker.
Upstream bug assigned to oprazak
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/14158 has been resolved.
Moving back to 'New' and removing external tracker - http://projects.theforeman.org/issues/14158 This one is a docs bug. :)
Adding link to upstream manual https://theforeman.org/plugins/foreman_openscap/0.7/index.html#4.5Tailoringfiles(foreman_openscap>=0.6.5) it does not contain too much information but might help.
Assigning to Clifton for review. Clifton - this is a feature for the 6.3 release, and requires a few new pieces of content. This bug will require a little research to get an understanding of SCAP and tailoring files, and documentation of the three items listed in the summary above. For this, it would be ideal if you can set up an environment and check the Hosts > Tailoring Files menu to see what steps are involved. Let me know if you have any questions, and feel free to reach out Russell on this topic as well. Russell has worked on OpenSCAP content in the past, and can provide some context if needed.
*** Bug 1499266 has been marked as a duplicate of this bug. ***
Hi Russell, Added a section titled "Tailoring Files" to the "Server Administration Guide" after the section title "Managing Compliance Policies". In the procedure "To Assign a Tailoring File to a Policy", additional configuration is possible after the initial steps. Can a phrase be used to notify the user that they have free reign with further configuration? Some KCS Solutions used "configure as required" when the steps to resolving the issue had been covered but further configuration would be required to complete the process. Can you please check: https://gitlab.cee.redhat.com/satellite-6-documentation/server-administration-guide/tree/BZ%231454565 If all is in order, please accept: https://gitlab.cee.redhat.com/satellite-6-documentation/server-administration-guide/merge_requests/86 A preview is available at: http://ccs-jenkins.gsslab.brq.redhat.com:8080/job/doc-Red_Hat_Satellite-6-Server_Administration_Guide-branch-BZ-1454565/lastSuccessfulBuild/artifact/tmp/en-US/html-single/index.html Thanks
Hi Russell, I changed the status from QA to Post as I feel it is best to document the entire train of this feature. Will investigate the remaining steps. Cheers,
Hi Russell, Please see: https://gitlab.cee.redhat.com/satellite-6-documentation/server-administration-guide/tree/BZ%231454565 If all is in order, please accept: https://gitlab.cee.redhat.com/satellite-6-documentation/server-administration-guide/merge_requests/86 A preview is available at: http://ccs-jenkins.gsslab.brq.redhat.com:8080/job/doc-Red_Hat_Satellite-6-Server_Administration_Guide-branch-BZ-1454565/lastSuccessfulBuild/artifact/tmp/en-US/html-single/index.html Cheers,
These changes will be published with the next release of the Red Hat Satellite 6.3 documentation. Closing.
Updating the target milestone to reflect the time frame in which this work was completed.
Updating the component and doc type.
*** Bug 1342303 has been marked as a duplicate of this bug. ***