How To Install scap-security-guide on CentOS 8
scap-security-guide is Security guidance and baselines in SCAP formats
Introduction
In this tutorial we learn how to install scap-security-guide on CentOS 8.
What is scap-security-guide
The scap-security-guide project provides a guide for configuration of the system from the final system’s security point of view. The guidance is specified in the Security Content Automation Protocol (SCAP) format and constitutes a catalog of practical hardening advice, linked to government requirements where applicable. The project bridges the gap between generalized policy requirements and specific implementation guidelines. The Red Hat Enterprise Linux 8 system administrator can use the oscap CLI tool from openscap-scanner package, or the scap-workbench GUI tool from scap-workbench package to verify that the system conforms to provided guideline. Refer to scap-security-guide(8) manual page for further information.
We can use yum or dnf to install scap-security-guide on CentOS 8. In this tutorial we discuss both methods but you only need to choose one of method to install scap-security-guide.
Install scap-security-guide on CentOS 8 Using dnf
Update yum database with dnf using the following command.
sudo dnf makecache --refresh
The output should look something like this:
CentOS Linux 8 - AppStream 43 kB/s | 4.3 kB 00:00
CentOS Linux 8 - BaseOS 65 kB/s | 3.9 kB 00:00
CentOS Linux 8 - ContinuousRelease 43 kB/s | 3.0 kB 00:00
CentOS Linux 8 - Extras 23 kB/s | 1.5 kB 00:00
CentOS Linux 8 - FastTrack 40 kB/s | 3.0 kB 00:00
CentOS Linux 8 - HighAvailability 36 kB/s | 3.9 kB 00:00
CentOS Linux 8 - Plus 24 kB/s | 1.5 kB 00:00
CentOS Linux 8 - PowerTools 50 kB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64 13 kB/s | 9.2 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 24 kB/s | 8.5 kB 00:00
Metadata cache created.
After updating yum database, We can install scap-security-guide using dnf by running the following command:
sudo dnf -y install scap-security-guide
Install scap-security-guide on CentOS 8 Using yum
Update yum database with yum using the following command.
sudo yum makecache --refresh
The output should look something like this:
CentOS Linux 8 - AppStream 43 kB/s | 4.3 kB 00:00
CentOS Linux 8 - BaseOS 65 kB/s | 3.9 kB 00:00
CentOS Linux 8 - ContinuousRelease 43 kB/s | 3.0 kB 00:00
CentOS Linux 8 - Extras 23 kB/s | 1.5 kB 00:00
CentOS Linux 8 - FastTrack 40 kB/s | 3.0 kB 00:00
CentOS Linux 8 - HighAvailability 36 kB/s | 3.9 kB 00:00
CentOS Linux 8 - Plus 24 kB/s | 1.5 kB 00:00
CentOS Linux 8 - PowerTools 50 kB/s | 4.3 kB 00:00
Extra Packages for Enterprise Linux Modular 8 - x86_64 13 kB/s | 9.2 kB 00:00
Extra Packages for Enterprise Linux 8 - x86_64 24 kB/s | 8.5 kB 00:00
Metadata cache created.
After updating yum database, We can install scap-security-guide using yum by running the following command:
sudo yum -y install scap-security-guide
How To Uninstall scap-security-guide on CentOS 8
To uninstall only the scap-security-guide package we can use the following command:
sudo dnf remove scap-security-guide
scap-security-guide Package Contents on CentOS 8
/usr/share/doc/scap-security-guide/Contributors.md
/usr/share/doc/scap-security-guide/LICENSE
/usr/share/doc/scap-security-guide/README.md
/usr/share/man/man8/scap-security-guide.8.gz
/usr/share/scap-security-guide/ansible
/usr/share/scap-security-guide/ansible/firefox-playbook-stig.yml
/usr/share/scap-security-guide/ansible/jre-playbook-stig.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-C2S.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-CS2.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-CSCF-RHEL6-MLS.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-desktop.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-fisma-medium-rhel6-server.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-ftp-server.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-nist-CL-IL-AL.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-pci-dss.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-rht-ccp.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-server.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-standard.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-stig.yml
/usr/share/scap-security-guide/ansible/rhel6-playbook-usgcb-rhel6-server.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-C2S.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-anssi_nt28_enhanced.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-anssi_nt28_high.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-anssi_nt28_intermediary.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-anssi_nt28_minimal.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-cis.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-cjis.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-cui.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-e8.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-hipaa.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-ncp.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-ospp.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-pci-dss.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-rhelh-stig.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-rhelh-vpp.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-rht-ccp.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-standard.yml
/usr/share/scap-security-guide/ansible/rhel7-playbook-stig.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-anssi_bp28_enhanced.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-anssi_bp28_intermediary.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-anssi_bp28_minimal.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-cis.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-cui.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-e8.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-hipaa.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-ospp.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-pci-dss.yml
/usr/share/scap-security-guide/ansible/rhel8-playbook-stig.yml
/usr/share/scap-security-guide/bash
/usr/share/scap-security-guide/bash/firefox-script-stig.sh
/usr/share/scap-security-guide/bash/jre-script-stig.sh
/usr/share/scap-security-guide/bash/rhel6-script-C2S.sh
/usr/share/scap-security-guide/bash/rhel6-script-CS2.sh
/usr/share/scap-security-guide/bash/rhel6-script-CSCF-RHEL6-MLS.sh
/usr/share/scap-security-guide/bash/rhel6-script-desktop.sh
/usr/share/scap-security-guide/bash/rhel6-script-fisma-medium-rhel6-server.sh
/usr/share/scap-security-guide/bash/rhel6-script-ftp-server.sh
/usr/share/scap-security-guide/bash/rhel6-script-nist-CL-IL-AL.sh
/usr/share/scap-security-guide/bash/rhel6-script-pci-dss.sh
/usr/share/scap-security-guide/bash/rhel6-script-rht-ccp.sh
/usr/share/scap-security-guide/bash/rhel6-script-server.sh
/usr/share/scap-security-guide/bash/rhel6-script-standard.sh
/usr/share/scap-security-guide/bash/rhel6-script-stig.sh
/usr/share/scap-security-guide/bash/rhel6-script-usgcb-rhel6-server.sh
/usr/share/scap-security-guide/bash/rhel7-script-C2S.sh
/usr/share/scap-security-guide/bash/rhel7-script-anssi_nt28_enhanced.sh
/usr/share/scap-security-guide/bash/rhel7-script-anssi_nt28_high.sh
/usr/share/scap-security-guide/bash/rhel7-script-anssi_nt28_intermediary.sh
/usr/share/scap-security-guide/bash/rhel7-script-anssi_nt28_minimal.sh
/usr/share/scap-security-guide/bash/rhel7-script-cis.sh
/usr/share/scap-security-guide/bash/rhel7-script-cjis.sh
/usr/share/scap-security-guide/bash/rhel7-script-cui.sh
/usr/share/scap-security-guide/bash/rhel7-script-e8.sh
/usr/share/scap-security-guide/bash/rhel7-script-hipaa.sh
/usr/share/scap-security-guide/bash/rhel7-script-ncp.sh
/usr/share/scap-security-guide/bash/rhel7-script-ospp.sh
/usr/share/scap-security-guide/bash/rhel7-script-pci-dss.sh
/usr/share/scap-security-guide/bash/rhel7-script-rhelh-stig.sh
/usr/share/scap-security-guide/bash/rhel7-script-rhelh-vpp.sh
/usr/share/scap-security-guide/bash/rhel7-script-rht-ccp.sh
/usr/share/scap-security-guide/bash/rhel7-script-standard.sh
/usr/share/scap-security-guide/bash/rhel7-script-stig.sh
/usr/share/scap-security-guide/bash/rhel8-script-anssi_bp28_enhanced.sh
/usr/share/scap-security-guide/bash/rhel8-script-anssi_bp28_intermediary.sh
/usr/share/scap-security-guide/bash/rhel8-script-anssi_bp28_minimal.sh
/usr/share/scap-security-guide/bash/rhel8-script-cis.sh
/usr/share/scap-security-guide/bash/rhel8-script-cui.sh
/usr/share/scap-security-guide/bash/rhel8-script-e8.sh
/usr/share/scap-security-guide/bash/rhel8-script-hipaa.sh
/usr/share/scap-security-guide/bash/rhel8-script-ospp.sh
/usr/share/scap-security-guide/bash/rhel8-script-pci-dss.sh
/usr/share/scap-security-guide/bash/rhel8-script-stig.sh
/usr/share/scap-security-guide/kickstart
/usr/share/scap-security-guide/kickstart/ssg-rhel6-pci-dss-with-gui-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel6-stig-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel6-usgcb-server-with-gui-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-anssi_nt28_enhanced-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-anssi_nt28_high-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-anssi_nt28_intermediary-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-anssi_nt28_minimal-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-cis-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-e8-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-hipaa-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-ospp-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel7-pci-dss-server-with-gui-oaa-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-anssi_bp28_enhanced-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-anssi_bp28_intermediary-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-anssi_bp28_minimal-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-cis-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-cui-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-e8-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-hipaa-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-ospp-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-pci-dss-ks.cfg
/usr/share/scap-security-guide/kickstart/ssg-rhel8-stig-ks.cfg
/usr/share/xml/scap/ssg/content
/usr/share/xml/scap/ssg/content/ssg-firefox-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-firefox-cpe-oval.xml
/usr/share/xml/scap/ssg/content/ssg-firefox-ds-1.2.xml
/usr/share/xml/scap/ssg/content/ssg-firefox-ds.xml
/usr/share/xml/scap/ssg/content/ssg-firefox-ocil.xml
/usr/share/xml/scap/ssg/content/ssg-firefox-oval.xml
/usr/share/xml/scap/ssg/content/ssg-firefox-xccdf.xml
/usr/share/xml/scap/ssg/content/ssg-jre-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-jre-cpe-oval.xml
/usr/share/xml/scap/ssg/content/ssg-jre-ds-1.2.xml
/usr/share/xml/scap/ssg/content/ssg-jre-ds.xml
/usr/share/xml/scap/ssg/content/ssg-jre-ocil.xml
/usr/share/xml/scap/ssg/content/ssg-jre-oval.xml
/usr/share/xml/scap/ssg/content/ssg-jre-xccdf.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-oval.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-ds-1.2.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-ds.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-ocil.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-oval.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-oval.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds-1.2.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-ocil.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-oval.xml
/usr/share/xml/scap/ssg/content/ssg-rhel7-xccdf.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-cpe-oval.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-ds-1.2.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-ocil.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-oval.xml
/usr/share/xml/scap/ssg/content/ssg-rhel8-xccdf.xml
References
Summary
In this tutorial we learn how to install scap-security-guide on CentOS 8 using yum and dnf.