Method: LinuxAdmin::Scap#lockdown_profile

Defined in:
lib/linux_admin/scap.rb

#lockdown_profile(ds_path, profile_id) ⇒ Object 



43
44
45
46
47
48
49
50
51
52
53
 
# File 'lib/linux_admin/scap.rb', line 43

def lockdown_profile(ds_path, profile_id)
  raise "OpenSCAP not available" unless self.class.openscap_available?

  session = OpenSCAP::Xccdf::Session.new(ds_path)
  session.load
  session.profile = profile_id
  session.evaluate
  session.remediate
ensure
  session.destroy if session
end