Support #382
Updated by Charles N 1 day ago
Parent/umbrella: #311 (OAM - Security Hardening Auditing and Compliance). Implement STIG/SCAP compliance tooling and controls, expanding the existing security_scap_stig KNELIAC role and building out the STIG/CMMC control library. ## Scope - [ ] Install SCAP Security Guide packages: `apt install ssg-base ssg-debderived ssg-debian ssg-nondebian ssg-applications` - [ ] Utilize ansible to run relevant playbooks from https://github.com/ComplianceAsCode/content - [ ] Expand security_scap_stig role (GRUB perms, modprobe blacklist, login banners, cron/at perms - partially done) - [ ] Build out STIG/CMMC compliance control library - [ ] Validate in sectestbed-* before prod ## Context - Reference: https://www.open-scap.org/security-policies/scap-security-guide/ - Roles executed via tsys-awx (AWX). ## Dependencies Depends on #379 #1 (test lab), #381 #3 (CIS baseline). **Blocks** #383 #5 (audit tooling), #389 #11 (Greenbone).