OpenSCAP content for SLE 16#684
Open
sounix000 wants to merge 3 commits into
Open
Conversation
lvicoun
requested changes
May 14, 2026
lvicoun
left a comment
lvicoun
left a comment
Contributor
There was a problem hiding this comment.
Hi Souvik,
please see my suggestions. Thanks!
lvicoun
approved these changes
Jun 9, 2026
lvicoun
left a comment
lvicoun
left a comment
Contributor
There was a problem hiding this comment.
Hi Souvik,
LGTM. Thanks!
dariavladykina
left a comment
dariavladykina
left a comment
Contributor
There was a problem hiding this comment.
Hi, please see some suggestions here. Thanks!
| xmlns:xlink="http://www.w3.org/1999/xlink" | ||
| xmlns:trans="http://docbook.org/ns/transclusion"> | ||
| <info> | ||
| <title>Overview</title> |
Contributor
There was a problem hiding this comment.
I would remove the first 2 paragraphs here - they are explained in section 2 - and just leave "The following sections describe...", and add a para in front of it saying sth like: This article explains how to use &oscap; and SSG to audit and harden &suselinunx; systems against recognized security baselines.
| <listitem> | ||
| <para> | ||
| &openscap; is an open source toolset that implements the Security Content | ||
| Automation Protocol (SCAP) framework. Combined with the &ssg;, it enables automated |
Contributor
There was a problem hiding this comment.
I'd add the SSG explained here to safely use the abbreviation later:
Suggested change
| Automation Protocol (SCAP) framework. Combined with the &ssg;, it enables automated | |
| Automation Protocol (SCAP) framework. Combined with the &ssg; (SSG), it enables automated |
| <!-- Introductory glue: sets context and outlines the workflow --> | ||
| <module resourceref="_openscap-intro" renderas="section"> | ||
| <merge> | ||
| <title>Overview</title> |
Contributor
There was a problem hiding this comment.
Maybe a more descriptive heading? I also suggested to change the structure down in the file.
Suggested change
| <title>Overview</title> | |
| <title>Auditing and hardening &suselinux; with &openscap;</title> |
| xmlns:xlink="http://www.w3.org/1999/xlink" | ||
| xmlns:trans="http://docbook.org/ns/transclusion"> | ||
| <info> | ||
| <title>Preparing the IT Infrastructure</title> |
Contributor
There was a problem hiding this comment.
Suggested change
| <title>Preparing the IT Infrastructure</title> | |
| <title>Preparing the IT infrastructure</title> |
| </para> | ||
| </section> | ||
| <section xml:id="openscap-infrastructure-preparing-procedure"> | ||
| <title>Preparation steps</title> |
Contributor
There was a problem hiding this comment.
Suggested change
| <title>Preparation steps</title> | |
| <title>What pre-hardening steps should you follow?</title> |
Comment on lines
+117
to
+119
| Automated scanning and remediation reduces manual effort, ensures consistent policy | ||
| enforcement across systems, and supports compliance with regulations such as HIPAA, | ||
| PCI-DSS v4, and ANSSI-BP-028. |
Contributor
There was a problem hiding this comment.
Suggested change
| Automated scanning and remediation reduces manual effort, ensures consistent policy | |
| enforcement across systems, and supports compliance with regulations such as HIPAA, | |
| PCI-DSS v4, and ANSSI-BP-028. | |
| Automated scanning and remediation reduce manual effort, ensure consistent policy | |
| enforcement across systems, and support compliance with regulations such as HIPAA, | |
| PCI-DSS v4 and ANSSI-BP-028. |
Comment on lines
+53
to
+54
| SCAP consists of the following components, which interact with each other to describe, | ||
| evaluate, and report on the security state of a system. |
Contributor
There was a problem hiding this comment.
Suggested change
| SCAP consists of the following components, which interact with each other to describe, | |
| evaluate, and report on the security state of a system. | |
| SCAP consists of the following components, which interact to describe, | |
| evaluate and report on the security state of a system. |
| </procedure> | ||
| <note> | ||
| <para> | ||
| Remediation must be run more than once. Rules are applied in alphabetical order, some rules |
Contributor
There was a problem hiding this comment.
Suggested change
| Remediation must be run more than once. Rules are applied in alphabetical order, some rules | |
| Remediation must be run more than once. Rules are applied in alphabetical order. Some rules |
| <itemizedlist> | ||
| <listitem> | ||
| <para> | ||
| Run remediation more than once. Rules are applied in alphabetical order, dependencies |
Contributor
There was a problem hiding this comment.
Suggested change
| Run remediation more than once. Rules are applied in alphabetical order, dependencies | |
| Run remediation more than once. Rules are applied in alphabetical order. Dependencies |
| xmlns:xlink="http://www.w3.org/1999/xlink" | ||
| xmlns:trans="http://docbook.org/ns/transclusion"> | ||
| <info> | ||
| <title>What's Next</title> |
Contributor
There was a problem hiding this comment.
Suggested change
| <title>What's Next</title> | |
| <title>What's next</title> |
| <section xml:id="openscap-system-scanning-remote-resources"> | ||
| <title>Using remote resources during a scan</title> | ||
| <para> | ||
| Some &ssg; content references external OVAL files, for example to check whether the system is |
Contributor
There was a problem hiding this comment.
Suggested change
| Some &ssg; content references external OVAL files, for example to check whether the system is | |
| Some &ssg; content references external OVAL files, for example, to check whether the system is |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PR creator: Description
OpenSCAP content for SLE 16.
PR creator: Are there any relevant issues/feature requests?
PR reviewer: Checklist for editorial review
Apart from the usual checks, please double-check also the following: