Enforce specific controls

To configure SCE to enforce only specific controls, use the only key.

Use a configuration that is similar to the following example:

Copy

# control-repo/data/nodes/node1.yaml 
sce_linux::benchmark: 'cis' 
sce_linux::config: 
  profile: 'server' 
  level: '1' 
  only: 
    - 'ensure_selinux_is_installed' 
    - 'ensure_selinux_is_not_disabled_in_bootloader_configuration' 
    - 'ensure_the_selinux_mode_is_not_disabled' 
    - 'ensure_selinux_policy_is_configured' 
    - 'ensure_the_selinux_mode_is_enforcing'