This repo will help get you started on producing a pre-hardened images. Its primarily designed for Openstack overcloud images, but will also work for generic RHEL based images - View it on GitHub