SCAPtimony

SCAPtimony project gives full testimony about compliance of your infrastructure. SCAPtimony is SCAP storage and database server build on top of OpenSCAP library. SCAPtimony can be deployed as a part of your Rails application (i.e. Foreman) or as a stand-alone sealed server.

• Current features:
  • Achieve SCAP audit results from your infrastructure
    • Provide API for tools to upload collected SCAP results
  • Define security/compliance policies
    • Upload SCAP content and assign it with the policy
    • Set-up a periodical schedule of audits for the policy
    • Organization defined targeting (Assign a set of nodes with the policy)
  • Result post-processing
    • Search SCAP results
    • Search for non-compliant systems
    • Search for not audited systems
  • Rails artefacts to display audit results within your application
• Future features:
  • Define security/compliance policies
    • Archive distinct versions of the policy
    • Define known-issues and waivers (Assign waivers with a set of nodes and the policy)
    • Set-up rules for automated deletion of results
  • vulnerability assessment (processing OVAL CVE streams)
  • Result post-processing
    • Comparison of audit results
    • Waive known issues
      • One time waivers of a report
      • Set-up periodic waivers for a given policy and system
      • Set a waiver expirations time (to give the time to remediate things)
      • Calculate score before and after waiver (ammount of risk accepted needs to be made available to the authorizing official)
  • Let us know, if your feature is missing.

Installation from RPMs

• Enable isimluk/OpenSCAP COPR repository

• Install SCAPtimony

  yum install rubygem-scaptimony ruby193-rubygem-scaptimony
  

Installation from upstream git

• Get SCAPtimony sources

  $ git clone https://github.com/OpenSCAP/scaptimony.git
  

• Build SCAPtimony RPM (instructions for Red Hat Enterprise Linux 6)

  Enable Software Collections as per instructions.

  $ cd scaptimony
  $ gem build scaptimony.gemspec
  # yum install yum-utils rpm-build scl-utils scl-utils-build ruby193-rubygems-devel ruby193-build ruby193
  # yum-builddep extra/rubygem-scaptimony.spec
  $ rpmbuild  --define "_sourcedir `pwd`" --define "scl ruby193" -ba extra/rubygem-scaptimony.spec
  

• Install SCAPtimony RPM

  # yum localinstall ~/rpmbuild/RPMS/noarch/ruby193-rubygem-scaptimony-*.noarch.rpm
  

Usage

Users are currently adviced to use SCAPtimony only through foreman_openscap.

Copyright

Copyright (c) 2014 Red Hat, Inc.

This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/.