Veeam hardened repo - full hardening?

[paulf123]

Greetings.

First thanks for this blog on setting up with RHEL etc.
https://www.veeam.com/blog/install-disa ... itory.html

This seems to be incomplete however. Selecting the security profile only sets some things; many more get discovered by scap evaluation for the profile/STIG and changes have to be made manually.

Does the prebuilt ISO include these extra steps?

Has anyone taken the steps to get 100% compliant and are there any issues/gotchas?


Thanks!

[HannesK]

Hello,
and welcome to the forums.

The ISO applies the profile in the same way as if you would manually install it. But we don't enforce for example a grub bootloader password or other things that are not required by the profile.

I remember going through the list of open things one could adjust later and don't see any issues / gotchas if you apply them manually.

Best regards
Hannes