Interested in collaboration

[shawndwells]

Hello! A friend sent me a link to this project. For quick introductions, I work for Red Hat and focus on US Gov security baselines. Specifically the SCAP Security Guide project, which is a collaboration between DoD/NIST/NSA and Red Hat to develop baseline content in SCAP and Ansible formats. Red Hat ships and supports that content natively in RHEL.

Is there interest in working directly with Red Hat and the other government collaborators to incorporate the GSA baseline directly into Linux? Right now multiple US Gov agencies publish their own baselines and we're working to collaborate in a central project.

[afeld]

👋 Sean! Definitely interested. This repository is meant to bring an operating system up to the GSA Benchmarks. We have some other OS hardening roles listed here, too.

We hadn't looked into using SCAP, though maybe we should?

Anyway, definitely interested in collaborating, and open to other ways to achieve OS hardening that meet the GSA requirements, with the consideration that we're trying to make a happy path of using Ansible at GSA.

/cc @jason-callaway

[jeremy-gillikin]

@shawndwells Hello Sean. Sorry for the long delay. We would be interested in collaborating. How can we help?
Also, curious, why did Red Hat move their RPMs for ansible into the extras channel? Trying to deploy ansible on rhel7 is a nightmare now.