How to Run Asynchronous Remote Assessments

You must become an administrator who is assigned the Compliance Assessor rights profile on both systems. For more information, see Configuring Administrators to Run Remote Compliance Commands. See also Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.4.

In this procedure, you use a roster to run assessments on several remote nodes at once.

  1. Use a roster to run assessments of the hosts in the roster.

    If no policy was set in the roster, group, or node scope of the roster, the assessments will use the compliance policy that is set on the individual hosts.

    $ pfexec compliance assess -r example-roster
    Assessment will be named 'example-roster.YYYY-MM-DD,HH:mm'
  2. On the local system, view the progress of the assessments.
    $ compliance list -av 'example-roster.YYYY-MM-DD,HH:mm'
    example-roster.YYYY-MM-DD,HH:mm
                UUID: ab345678-1111-1111-1111-12345678abcd
                    Benchmark=benchmark
                    Profile=profile
                    Status=Running
                    Node=node1
                    ...

    You can also check the Status tag.

    $ compliance list -am Status=Running
            ab345678-1111-1111-1111-12345678abcd
                    Name=example-roster.YYYY-MM-DD,HH:mm

    You can also run these commands on the remote systems.

    For more information, see the compliance-roster(8) man page.