Re: How, in general,
does XCCDF_POLICY engine correlate multi-platform "shared" rule with
platform specific remediation? Is this specific to oscap datastreams?
How does one reconcile (STIG) Cat-1, Cat-2, Cat-3 severity codes with, for example Profile nist-cl-il-al (available in rhel-6)? Does oscap Profile nist-cl-il-al qualify as a "collector" as discussed in the referenced nistir_8011_ipd-draft?