Generate '--stig-viewer' results from '--results-arf' output

[James Cassell]

Hello,

I see that I can generate a report after the fact by using the 'oscap generate report' command with the results xml.  Can I generate STIG Viewer-compatible output after the fact, as well?

My use case is to run the ssg benchmark against a RHEL 6 system that has a old version of openscap, then move those results to a system with the current version to do the conversion.

I've also had to do this with a RHEL 7.3 system, in which case I was able to workaround the issues by re-building the newest openscap SRPM against RHEL 7.3, but that's not a very clean solution and results in an unsupported package being installed on the system.

Is there a template somewhere that will allow the 'oscap generate custom' output the equivalent of '--stig-viewer' from a results xml file?

Thanks for any insight!

V/r,
James Cassell

[Jan Cerny]

Hi,

It currently isn't possible, and we don't have any template there.

But I have found that the --stig-viewer option has been updated and the
latest version of the man page says:

--stig-viewer FILE
Writes XCCDF results into FILE in a format readable by DISA STIG Viewer. See
http://iase.disa.mil/stigs/Pages/stig-viewing-guidance.aspx. This option
should be used to generate results for DISA STIG Viewer older than 2.6. To
use DISA STIG Viewer 2.6 or newer, use --results instead.

From this, it seems to me it's enough to generate the XCCDF results
using '--results results.xml' option and STIG Viewer should be able to
consume them. I haven't tried that myself, though.

Regards

Jan Černý
Security Technologies | Red Hat, Inc.

----- Original Message -----
> From: "James Cassell" 
> To: "SCAP Security Guide List" 
> Sent: Friday, March 22, 2019 9:37:41 PM
> Subject: Generate '--stig-viewer' results from '--results-arf' output
>
> Hello,
>
> I see that I can generate a report after the fact by using the 'oscap
> generate report' command with the results xml.  Can I generate STIG
> Viewer-compatible output after the fact, as well?
>
> My use case is to run the ssg benchmark against a RHEL 6 system that has a
> old version of openscap, then move those results to a system with the
> current version to do the conversion.
>
> I've also had to do this with a RHEL 7.3 system, in which case I was able to
> workaround the issues by re-building the newest openscap SRPM against RHEL
> 7.3, but that's not a very clean solution and results in an unsupported
> package being installed on the system.
>
> Is there a template somewhere that will allow the 'oscap generate custom'
> output the equivalent of '--stig-viewer' from a results xml file?
>
> Thanks for any insight!
>
> V/r,
> James Cassell
> _______________________________________________
> scap-security-guide mailing list --
> [e-mail]
> To unsubscribe send an email to
> [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedorahosted.org/archives/list/[e-mail]...