I started researching OpenSCAP due to RHN Satellite's "audit" feature and figured it would help to appease our PCI auditors. So far, it seems like a pain to implement. Does anyone have any experience setting this up or using it? Am I better off with an alternative? Has anyone set up a custom profile?
Thanks!
[link][2 comments]