Automated Baseline Compliance
by shlammed from LinuxQuestions.org on (#596D3)
Hi folks,
Was wondering what different solutions people may be using out there to get some ideas for myself.
Essentially, looking for a way to ensure that any systems (mainly Red Hat servers) would not be promoted to production environments without confirming that they meet a minimum standard in terms of config, software installed, services running, etc.
I was looking at OpenSCAP as a start.
What is everyone else doing?
Was wondering what different solutions people may be using out there to get some ideas for myself.
Essentially, looking for a way to ensure that any systems (mainly Red Hat servers) would not be promoted to production environments without confirming that they meet a minimum standard in terms of config, software installed, services running, etc.
I was looking at OpenSCAP as a start.
What is everyone else doing?