Control Compliance Suite

CCS has been dumped in my lap and now I find out that CCS does not support CentOs (really).

CentOS is based on Red Hat Enterprise Linux without the RHEL labels. I really need to make this work, does anyone have a way a work around to pull data and run jobs against CentOS?

Any help is great appreciated

Hi,

Before you could try to run any standards aganist CIS.  I would suggest you to first try to query the CentOS from RMS console if your not able to query the CentOS then trying to run a CIS standard against CentOS is not feasiable.

As per my knowldage CCS wont able to query on CentOS as i dont have any test environment to confirm (Symantec offically tells CentOS is not supported on CCS ) you can this as a first step.  If your sucessfull in this then you can create your own standard and copy the checks from CIS for Redhat and try to run it.

I've been trhough this scenario.

The RMS console was able to query CentOS machines, then we copied a couple of checks from RHEL 5 into a new custom standard for testing and everithing worked fine.

Regards

change the content of /etc/redhat-release to:

Red Hat Enterprise Linux AS release 5

Hi,

Instead of running whole standard what you can do for test purpose is create a new std (blank) and then copy one of the check from pre-defined std (Redhat)  and in the expression intead of selecting particular Redhat version select the generic which is accepted for all Redhat irrespective and then try to run on CentOS.  It should work, you may try this.

you also may be running into the Target Type for each check.  in the pre-defined checks, there is a specific target type that will only apply to a certain OS and OS Version.  If it is imported into the Reporting & Analytics console as CentOS, then that might be your problem.   You may be able to fake the R&A when you import by doing a CSV import and changing the OS type and version when you import the assets.  

Hope that helps.