File _patchinfo of Package patchinfo.26523
<patchinfo incident="26523">
<packager>msmeissn</packager>
<rating>moderate</rating>
<category>optional</category>
<issue tracker="jsc" id="SLE-20927"></issue>
<summary>Optional update for ssg-apply</summary>
<description>This update for ssg-apply fixes the following issues:
This package contains a systemd service which can be run on boot which
detects and/or mitigates hardening issues from the scap-security-guide,
aka ComplianceAsCode.
The behaviour can be configured in the config file /etc/ssg-apply/default.conf
Options:
- "profile" ...
Which SCAP XCCDF profile to use. The default is "stig" for the SUSE supported DISA stig profile.
Other profiles from the scap-security-guide can also be selected, like "cis", "hipaa", "pci-dss" and others.
- "remediate"
Whether to have the service immediately fix the issues.
The default is "off", if you want to enable automatic remediation, use "on".
- "tailoring-file" ... default is "" (none).
A tailoring file is a XML configuration file that can be used to select/deselect rules to check / remediate.
The service can be enabled with:
* systemctl enable ssg-apply.service
</description>
</patchinfo>