Hi,
I couldn't find any SSG profiles for the Apache HTTP Server. Are there plans on implementing them in the future?
Thanks, this project is awesome! =D
Best regards, Eduardo Santos
Hi,
Currently there is no plan to introduce the Apache HTTP Server product followed by a specific profile for it. However, the project is welcome to contributions in any form.
Here is a documentation useful to create new products: https://complianceascode.readthedocs.io/en/latest/manual/developer/03_creati...
Regarding Apache HTTP Server, there is already some rules applicable to it: https://github.com/ComplianceAsCode/content/tree/master/linux_os/guide/servi...
Maybe you could create a tailored profile and select the relevant rules: https://static.open-scap.org/openscap-1.3/oscap_user_manual.html#_tailoring
Thanks and feel free to contact us or even contribute to the project.
Best regards,
Marcus Burghardt
scap-security-guide@lists.fedorahosted.org