{"id":11314,"date":"2021-02-04T21:21:49","date_gmt":"2021-02-04T12:21:49","guid":{"rendered":"https:\/\/mini.jellypo.pe.kr\/wp\/?p=11314"},"modified":"2021-02-06T21:49:12","modified_gmt":"2021-02-06T12:49:12","slug":"2021-02-04","status":"publish","type":"post","link":"https:\/\/mini.jellypo.pe.kr\/wp\/?p=11314","title":{"rendered":"2021-02-04 OSCAP \ud14c\uc2a4\ud2b8"},"content":{"rendered":"\n

\ud55c \uc77c<\/h2>\n\n\n\n

OSCAP PCI-DSS \uc124\uc815 \uc801\uc6a9 \ud14c\uc2a4\ud2b8 https:\/\/www.open-scap.org\/getting-started\/<\/p>\n\n\n\n

CentOS 7 Ansible \uc124\uce58<\/p>\n\n\n\n

  1. \uc800\uc7a5\uc18c \ucd94\uac00
    1. yum -y install centos-release-ansible-29<\/li><\/ol><\/li>
    2. Ansible \uc124\uce58
      1. yum -y install ansible<\/li><\/ol><\/li>
      2. OSCAP \uc2a4\uce90\ub108 \uc124\uce58
        1. yum install scap-workbench openscap-scanner<\/li><\/ol><\/li>
        2. \uc2a4\uce94 \ub8f0 \uae30\uc900\uc73c\ub85c ansible \ubd81 \ub9cc\ub4e4\uae30
          1. oscap xccdf generate fix –profile pci-dss –template urn:xccdf:fix:script:ansible \/usr\/share\/xml\/scap\/ssg\/content\/ssg-rhel7-xccdf.xml<\/li>
          2. \ud45c\uc900 \ucd9c\ub825 \ub418\ub2c8 \ucd9c\ub825\uc7ac\uc9c0\uc815\uc73c\ub85c playbook.yml \ub9cc\ub4e4 \uac83.<\/li><\/ol><\/li>
          3. \uc0dd\uc131\ub41c playbook.yml \uc801\uc6a9
            1. ansible-playbook -i “<IP>,” playbook.yml<\/li><\/ol><\/li><\/ol>\n\n\n\n

              \uc2a4\uce94 \ud56d\ubaa9\uc774 \ub9ce\uace0 AIDA DB \uc0dd\uc131\uae4c\uc9c0 \ud558\uae30 \ub54c\ubb38\uc5d0 \uc2dc\uac04\uc774 \uaf64 \uac78\ub9bc.<\/p>\n\n\n\n

              \"\"<\/a><\/figure>\n\n\n\n

              RHEL\uac00 \uc544\ub2cc CentOS \ub77c\uc11c GPG \ud0a4 \ud30c\uc77c \uc77d\uae30 \uc2e4\ud328… playbook.yml \uc5d0\uc11c \ud30c\uc77c\uba85\uc744 RPM-GPG-KEY-centosofficial \ub85c \uc218\uc815\ud558\uba74 \uc5d0\ub7ec \uc548 \ub0a0\ub4ef.<\/p>\n\n\n\n

              \"\"<\/a><\/figure>\n\n\n\n

              \ud30c\uc77c\uba85 \uc218\uc815\ud574\uc92c\ub354\ub2c8 \uc5d0\ub7ec \uc5c6\uc774 \uc798 \ub05d\ub0ac\ub2e4. \uadf8\ub7f0\ub370 \uc774\uac70 \uc124\uc815\uc744 \ubc14\uafb8\ub294\uac8c \ub9de\ub098…?<\/p>\n\n\n\n

              <\/p>\n\n\n\n

              RHEL Life Cycle<\/p>\n\n\n\n

              https:\/\/access.redhat.com\/support\/policy\/updates\/errata\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

              \ud55c \uc77c OSCAP PCI-DSS \uc124\uc815 \uc801\uc6a9 \ud14c\uc2a4\ud2b8 https:\/\/www.open-scap.org\/getting-started\/ CentOS 7 Ansible \uc124\uce58 \uc800\uc7a5\uc18c \ucd94\uac00 yum -y install centos-release-ansible-29 Ansible \uc124\uce58 yum -y install ansible OSCAP \uc2a4\uce90\ub108 \uc124\uce58 yum install scap-workbench openscap-scanner \uc2a4\uce94 \ub8f0 \uae30\uc900\uc73c\ub85c ansible \ubd81 \ub9cc\ub4e4\uae30 oscap xccdf generate fix –profile pci-dss –template urn:xccdf:fix:script:ansible \/usr\/share\/xml\/scap\/ssg\/content\/ssg-rhel7-xccdf.xml \ud45c\uc900 \ucd9c\ub825 \ub418\ub2c8 \ucd9c\ub825\uc7ac\uc9c0\uc815\uc73c\ub85c playbook.yml \ub9cc\ub4e4 \uac83. \uc0dd\uc131\ub41c playbook.yml […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[86,89],"class_list":["post-11314","post","type-post","status-publish","format-standard","hentry","category-13","tag-gnu-linux","tag-89"],"_links":{"self":[{"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=\/wp\/v2\/posts\/11314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11314"}],"version-history":[{"count":6,"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=\/wp\/v2\/posts\/11314\/revisions"}],"predecessor-version":[{"id":11357,"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=\/wp\/v2\/posts\/11314\/revisions\/11357"}],"wp:attachment":[{"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mini.jellypo.pe.kr\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}