Workflow · v1.0.0
Collect Linux baseline facts
Collect every online Linux agent's security settings (keystone/linux-agent collect_facts) into the host-facts table. Evaluation is automatic: the write marks the compliance checks over host-facts due, and they are read on the next tick.
Use cases
- Run it daily — create a job for it — or put collect_facts on a device job instead.
Included in packs
Each of these packs carries this workflow, so installing the pack installs it too.
- Linux security baselineCompliance checks for Linux hosts: the Linux agent module's fact collector and OpenSCAP import, the host-facts and scap-results table types, 21 checks over SSH, accounts, sudo, auditd, packages, kernel settings and patching mapped to NIST SP 800-53 (and to Truestone catalogue topics, as…
linuxbaseline