Help with Compiling SSG

[Bertilla Theodore]

Hi

I am new to SCAP technology and trying to learn adding new XCCDF and OVAL
content to SCAP security guide. I am following the workshop content at
http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf &
https://jlieskov.files.wordpress.com/2013/11/scap_security_guide_questions_a...

But they seem to be outdated and I am lost since the directory structure of
the latest SSG is different than the one at the time of the workshop.
Although I could locate and add a new XCCDF rule, I'm not sure how to
compile and validate after that. 'make' returns errors as there is no
Makefile. The ssg macros in CMakeLists.txt are missing their definition, so
cmake is also not working. I am also not able to locate the HTML guide
where I can see the newly added rule (I am guessing that's because I
couldn't compile in the first place). I've got the SSG source from
https://github.com/OpenSCAP/scap-security-guide.

Please help me on how I should proceed. If there is an updated
documentation, please point it out to me.

Your advise would be of great help.
Thanks in advance.

Best regards
Bertilla Theodore

[Trevor Vaughan]

Bertilla,

This may be a bit more than you're looking for, but we've started
integrating some InSpec work into our workflow and are using the SSG to
validate it.

The SSG part of our acceptance test can be found at
https://github.com/simp/inspec_profiles/blob/dev/spec/acceptance/suites/defa...
which does a full compile of the SSG at
https://github.com/simp/inspec_profiles/blob/dev/spec/acceptance/suites/defa...
.

Trevor

On Tue, Jun 20, 2017 at 5:52 AM, Bertilla Theodore <
[e-mail]> wrote:
> Hi
>
> I am new to SCAP technology and trying to learn adding new XCCDF and OVAL
> content to SCAP security guide. I am following the workshop content at
> http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf &
> https://jlieskov.files.wordpress.com/2013/11/scap_security_guide_
> questions_answers_contributor_workshop_volume_2_january_2016.pdf
>
> But they seem to be outdated and I am lost since the directory structure
> of the latest SSG is different than the one at the time of the workshop.
> Although I could locate and add a new XCCDF rule, I'm not sure how to
> compile and validate after that. 'make' returns errors as there is no
> Makefile. The ssg macros in CMakeLists.txt are missing their definition, so
> cmake is also not working. I am also not able to locate the HTML guide
> where I can see the newly added rule (I am guessing that's because I
> couldn't compile in the first place). I've got the SSG source from
> https://github.com/OpenSCAP/scap-security-guide.
>
> Please help me on how I should proceed. If there is an updated
> documentation, please point it out to me.
>
> Your advise would be of great help.
> Thanks in advance.
>
> Best regards
> Bertilla Theodore
>
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org

[Shawn Wells]

> On Jun 20, 2017, at 5:52 AM, Bertilla Theodore  wrote:
>
> Hi
>
> I am new to SCAP technology and trying to learn adding new XCCDF and OVAL content to SCAP security guide. I am following the workshop content at http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf & https://jlieskov.files.wordpress.com/2013/11/scap_security_guide_questions_a...
>
> But they seem to be outdated and I am lost since the directory structure of the latest SSG is different than the one at the time of the workshop. Although I could locate and add a new XCCDF rule, I'm not sure how to compile and validate after that. 'make' returns errors as there is no Makefile. The ssg macros in CMakeLists.txt are missing their definition, so cmake is also not working. I am also not able to locate the HTML guide where I can see the newly added rule (I am guessing that's because I couldn't compile in the first place). I've got the SSG source from https://github.com/OpenSCAP/scap-security-guide.
>
> Please help me on how I should proceed. If there is an updated documentation, please point it out to me.
>
> Your advise would be of great help.
> Thanks in advance.
>
> Best regards
> Bertilla Theodore

Thanks for using the mailing list!

The build from source instructions can be found here :

https://github.com/OpenSCAP/scap-security-guide/blob/master/BUILD.md
> scap-security-guide mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]

[Martin Preisler]

On Tue, Jun 20, 2017 at 11:20 AM, Shawn Wells  wrote:
> On Jun 20, 2017, at 5:52 AM, Bertilla Theodore 
> wrote:
>
> Hi
>
> I am new to SCAP technology and trying to learn adding new XCCDF and OVAL
> content to SCAP security guide. I am following the workshop content at
> http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf &
> https://jlieskov.files.wordpress.com/2013/11/scap_security_guide_questions_a...
>
> But they seem to be outdated and I am lost since the directory structure of
> the latest SSG is different than the one at the time of the workshop.
> Although I could locate and add a new XCCDF rule, I'm not sure how to
> compile and validate after that. 'make' returns errors as there is no
> Makefile. The ssg macros in CMakeLists.txt are missing their definition, so
> cmake is also not working. I am also not able to locate the HTML guide where
> I can see the newly added rule (I am guessing that's because I couldn't
> compile in the first place). I've got the SSG source from
> https://github.com/OpenSCAP/scap-security-guide.
>
> Please help me on how I should proceed. If there is an updated
> documentation, please point it out to me.
>
> Your advise would be of great help.
> Thanks in advance.
>
> Best regards
> Bertilla Theodore

Thanks for letting us know about your experience. I have made a PR
that should prevent some of these issues for future users:

https://github.com/OpenSCAP/scap-security-guide/pull/2104

[Bertilla Theodore]

Hi

Thanks for the suggestions. Just adding here that I am working on the RHEL
6 profiles of SSG and whenever I try to compile after changes, make returns
errors. I am keeping an eye on the git repo for the commits. I'm not sure
what is the difference between in-source and out-of-source builds. Any help?

On 20 June 2017 at 22:00, Martin Preisler  wrote:
> On Tue, Jun 20, 2017 at 11:20 AM, Shawn Wells  wrote:
> > On Jun 20, 2017, at 5:52 AM, Bertilla Theodore <
>
> [e-mail]>
> > wrote:
> >
> > Hi
> >
> > I am new to SCAP technology and trying to learn adding new XCCDF and OVAL
> > content to SCAP security guide. I am following the workshop content at
> > http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf &
> > https://jlieskov.files.wordpress.com/2013/11/scap_
>
> security_guide_questions_answers_contributor_workshop_
> volume_2_january_2016.pdf
> > But they seem to be outdated and I am lost since the directory structure
>
> of
> > the latest SSG is different than the one at the time of the workshop.
> > Although I could locate and add a new XCCDF rule, I'm not sure how to
> > compile and validate after that. 'make' returns errors as there is no
> > Makefile. The ssg macros in CMakeLists.txt are missing their definition,
>
> so
> > cmake is also not working. I am also not able to locate the HTML guide
>
> where
> > I can see the newly added rule (I am guessing that's because I couldn't
> > compile in the first place). I've got the SSG source from
> > https://github.com/OpenSCAP/scap-security-guide.
> >
> > Please help me on how I should proceed. If there is an updated
> > documentation, please point it out to me.
> >
> > Your advise would be of great help.
> > Thanks in advance.
> >
> > Best regards
> > Bertilla Theodore
>
> Thanks for letting us know about your experience. I have made a PR
> that should prevent some of these issues for future users:
>
> https://github.com/OpenSCAP/scap-security-guide/pull/2104
>
> --
> Martin Preisler
> _______________________________________________
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org

[Shawn Wells]

On 6/21/17 11:47 AM, Bertilla Theodore wrote:
> Thanks for the suggestions. Just adding here that I am working on the
> RHEL 6 profiles of SSG and whenever I try to compile after changes,
> make returns errors. I am keeping an eye on the git repo for the
> commits. I'm not sure what is the difference between in-source and
> out-of-source builds. Any help?

Can you share the output of the make process? Hard to guess what could
be happening without.

[Bertilla Theodore]

I've attached the last part of the make process which has the errors. The
new rules that I have added have not been parsed.

On 21 June 2017 at 17:28, Shawn Wells  wrote:
> On 6/21/17 11:47 AM, Bertilla Theodore wrote:
> > Thanks for the suggestions. Just adding here that I am working on the
> > RHEL 6 profiles of SSG and whenever I try to compile after changes,
> > make returns errors. I am keeping an eye on the git repo for the
> > commits. I'm not sure what is the difference between in-source and
> > out-of-source builds. Any help?
>
> Can you share the output of the make process? Hard to guess what could
> be happening without.
> _______________________________________________
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org

[Shawn Wells]

On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> I've attached the last part of the make process which has the errors.
> The new rules that I have added have not been parsed.
> xml:307: parser error : Extra content at the end of the document
>
> <Profile id="common">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/input/profiles/ftp-server.xml:16:
> parser error : Extra content at the end of the document
> <Profile id="ftp-server" extends="server">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/input/xccdf/system/software/integrity.xml:383:
> parser error : Extra content at the end of the document
> <Group id="integrity">
> ^
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/input/xccdf/services/smb.xml:229:
> parser error : Extra content at the end of the document
> <Group id="smb">

I'm guessing there are missing brackets/syntax errors in the content
added to these files.
> ^
> [  0%] Built target generate-internal-rhel6-shorthand.xml
> [  0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 429: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 465: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 526: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> File
> '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> line 1908: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> match found for key-sequence ['common'] of keyref
> '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> /home/security/Documents/MySSG/scap-security-guide/RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml.
> [oscap_so     urce.c:319]
> make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> make[2]: ***
> [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-resolved.xml.dir/all]
> Error 2
> make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> make: *** [rhel6-content] Error 2

[Bertilla Theodore]

Yes, I thought so too. But I am not able to figure out what's wrong.
For one, the following is the exact content added to integrity.xml ( as per
http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf )

<Rule id="package_scap-security-guide_installed" severity="high">

<title>Install SCAP security guide</title>

<description> The SSG can be installed by using `yum install
scap-security-guide` as a root user

</description>

<ocil clause="SCAP Security guide is not installed">

<package-check-macro package="scap-security-guide" />

</ocil>

<rational> Bertilla was here to  make this new rule

</rational>

<oval id="package_scap-security-guide_installed" />

</Rule>

On 21 June 2017 at 17:54, Shawn Wells  wrote:
> On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> > I've attached the last part of the make process which has the errors.
> > The new rules that I have added have not been parsed.
> > xml:307: parser error : Extra content at the end of the document
> >
> > <Profile id="common">
> > ^
> > /home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/input/profiles/ftp-server.xml:16:
> > parser error : Extra content at the end of the document
> >
> > <Profile id="ftp-server" extends="server">
> > ^
> > /home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/input/xccdf/system/software/integrity.xml:383:
> > parser error : Extra content at the end of the document
> >
> > <Group id="integrity">
> > ^
> > /home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/input/xccdf/services/smb.xml:229:
> > parser error : Extra content at the end of the document
> >
> > <Group id="smb">
>
> I'm guessing there are missing brackets/syntax errors in the content
> added to these files.
> > ^
> > [  0%] Built target generate-internal-rhel6-shorthand.xml
> > [  0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> > line 429: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> > line 465: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> > line 526: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > File
> > '/home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml'
> > line 1908: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > match found for key-sequence ['common'] of keyref
> > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> > /home/security/Documents/MySSG/scap-security-guide/
>
> RHEL/6/RHEL/6/xccdf-unlinked-resolved.xml.
> > [oscap_so     urce.c:319]
> > make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> > make[2]: ***
> > [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-
>
> resolved.xml.dir/all]
> > Error 2
> > make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> > make: *** [rhel6-content] Error 2
>
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org

[Gabe Alford]

Where the rules that you added inside the <Group> elements rather than just
appended to the bottom of the file?
> <description> The SSG can be installed by using `yum install

scap-security-guide` as a root user
Use <tt>yum install scap-security-guide</tt> or <pre>yum install
scap-security-guide</pre> here.

Gabe

On Wed, Jun 21, 2017 at 11:05 AM, Bertilla Theodore <
[e-mail]> wrote:
> Yes, I thought so too. But I am not able to figure out what's wrong.
> For one, the following is the exact content added to integrity.xml ( as
> per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf
> )
>
> <Rule id="package_scap-security-guide_installed" severity="high">
>
>  <title>Install SCAP security guide</title>
>
> <description> The SSG can be installed by using `yum install
> scap-security-guide` as a root user
>
>  </description>
>
>  <ocil clause="SCAP Security guide is not installed">
>
>  <package-check-macro package="scap-security-guide" />
>
>  </ocil>
>
> <rational> Bertilla was here to  make this new rule
>
>  </rational>
>
>  <oval id="package_scap-security-guide_installed" />
>
> </Rule>
>
> On 21 June 2017 at 17:54, Shawn Wells  wrote:
> > On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> > > I've attached the last part of the make process which has the errors.
> > > The new rules that I have added have not been parsed.
> > > xml:307: parser error : Extra content at the end of the document
> > >
> > > <Profile id="common">
> > > ^
> > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > input/profiles/ftp-server.xml:16:
> > > parser error : Extra content at the end of the document
> > >
> > > <Profile id="ftp-server" extends="server">
> > > ^
> > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > input/xccdf/system/software/integrity.xml:383:
> > > parser error : Extra content at the end of the document
> > >
> > > <Group id="integrity">
> > > ^
> > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > input/xccdf/services/smb.xml:229:
> > > parser error : Extra content at the end of the document
> > >
> > > <Group id="smb">
> >
> > I'm guessing there are missing brackets/syntax errors in the content
> > added to these files.
> > > ^
> > > [  0%] Built target generate-internal-rhel6-shorthand.xml
> > > [  0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> > > File
> > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > RHEL/6/xccdf-unlinked-resolved.xml'
> > > line 429: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > match found for key-sequence ['common'] of keyref
> > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > File
> > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > RHEL/6/xccdf-unlinked-resolved.xml'
> > > line 465: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > match found for key-sequence ['common'] of keyref
> > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > File
> > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > RHEL/6/xccdf-unlinked-resolved.xml'
> > > line 526: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > match found for key-sequence ['common'] of keyref
> > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > File
> > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > RHEL/6/xccdf-unlinked-resolved.xml'
> > > line 1908: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > match found for key-sequence ['common'] of keyref
> > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/
> >
> > RHEL/6/xccdf-unlinked-resolved.xml.
> > > [oscap_so     urce.c:319]
> > > make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> > > make[2]: ***
> > > [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-re
> >
> > solved.xml.dir/all]
> > > Error 2
> > > make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> > > make: *** [rhel6-content] Error 2
> >
> > scap-security-guide mailing list -- [e-mail]
> > rahosted.org
> > To unsubscribe send an email to scap-security-guide-leave@list
> > s.fedorahosted.org
>
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org

[Bertilla Theodore]

Yes, the <Rule> element is nested inside <Group> element. And since <tt>
and <pre> tags are for formatting, I didn't give importance to them for now.

On 21 June 2017 at 18:10, Gabe Alford  wrote:
> Where the rules that you added inside the <Group> elements rather than
> just appended to the bottom of the file?
> > <description> The SSG can be installed by using `yum install
>
> scap-security-guide` as a root user
> Use <tt>yum install scap-security-guide</tt> or <pre>yum install
> scap-security-guide</pre> here.
>
> Gabe
>
> On Wed, Jun 21, 2017 at 11:05 AM, Bertilla Theodore <
> [e-mail]> wrote:
> > Yes, I thought so too. But I am not able to figure out what's wrong.
> > For one, the following is the exact content added to integrity.xml ( as
> > per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Cou
> > rsebook-v2.pdf )
> >
> > <Rule id="package_scap-security-guide_installed" severity="high">
> >
> >  <title>Install SCAP security guide</title>
> >
> > <description> The SSG can be installed by using `yum install
> > scap-security-guide` as a root user
> >
> >  </description>
> >
> >  <ocil clause="SCAP Security guide is not installed">
> >
> >  <package-check-macro package="scap-security-guide" />
> >
> >  </ocil>
> >
> > <rational> Bertilla was here to  make this new rule
> >
> >  </rational>
> >
> >  <oval id="package_scap-security-guide_installed" />
> >
> > </Rule>
> >
> > On 21 June 2017 at 17:54, Shawn Wells  wrote:
> > > On 6/21/17 12:44 PM, Bertilla Theodore wrote:
> > > > I've attached the last part of the make process which has the errors.
> > > > The new rules that I have added have not been parsed.
> > > > xml:307: parser error : Extra content at the end of the document
> > > >
> > > > <Profile id="common">
> > > > ^
> > > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/in
> > >
> > > put/profiles/ftp-server.xml:16:
> > > > parser error : Extra content at the end of the document
> > > >
> > > > <Profile id="ftp-server" extends="server">
> > > > ^
> > > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/in
> > >
> > > put/xccdf/system/software/integrity.xml:383:
> > > > parser error : Extra content at the end of the document
> > > >
> > > > <Group id="integrity">
> > > > ^
> > > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/in
> > >
> > > put/xccdf/services/smb.xml:229:
> > > > parser error : Extra content at the end of the document
> > > >
> > > > <Group id="smb">
> > >
> > > I'm guessing there are missing brackets/syntax errors in the content
> > > added to these files.
> > > > ^
> > > > [  0%] Built target generate-internal-rhel6-shorthand.xml
> > > > [  0%] [rhel6-content] generating xccdf-unlinked-resolved.xml
> > > > File
> > > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R
> > >
> > > HEL/6/xccdf-unlinked-resolved.xml'
> > > > line 429: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > > match found for key-sequence ['common'] of keyref
> > > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > > File
> > > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R
> > >
> > > HEL/6/xccdf-unlinked-resolved.xml'
> > > > line 465: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > > match found for key-sequence ['common'] of keyref
> > > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > > File
> > > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R
> > >
> > > HEL/6/xccdf-unlinked-resolved.xml'
> > > > line 526: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > > match found for key-sequence ['common'] of keyref
> > > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > > File
> > > > '/home/security/Documents/MySSG/scap-security-guide/RHEL/6/R
> > >
> > > HEL/6/xccdf-unlinked-resolved.xml'
> > > > line 1908: Element '{http://checklists.nist.gov/xccdf/1.1%7DProfile': No
> > > > match found for key-sequence ['common'] of keyref
> > > > '{http://checklists.nist.gov/xccdf/1.1%7DprofileExtIdKeyRef'.
> > > > OpenSCAP Error: Invalid XCCDF Checklist (1.1) content in
> > > > /home/security/Documents/MySSG/scap-security-guide/RHEL/6/RH
> > >
> > > EL/6/xccdf-unlinked-resolved.xml.
> > > > [oscap_so     urce.c:319]
> > > > make[3]: *** [RHEL/6/xccdf-unlinked-resolved.xml] Error 1
> > > > make[2]: ***
> > > > [RHEL/6/CMakeFiles/generate-internal-rhel6-xccdf-unlinked-re
> > >
> > > solved.xml.dir/all]
> > > > Error 2
> > > > make[1]: *** [RHEL/6/CMakeFiles/rhel6-content.dir/rule] Error 2
> > > > make: *** [rhel6-content] Error 2
> > >
> > > scap-security-guide mailing list -- [e-mail]
> > > rahosted.org
> > > To unsubscribe send an email to scap-security-guide-leave@list
> > > s.fedorahosted.org
> >
> > scap-security-guide mailing list -- [e-mail]
> > rahosted.org
> > To unsubscribe send an email to scap-security-guide-leave@list
> > s.fedorahosted.org
>
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org

[Shawn Wells]

On 6/21/17 1:05 PM, Bertilla Theodore wrote:
> Yes, I thought so too. But I am not able to figure out what's wrong.
> For one, the following is the exact content added to integrity.xml (
> as
> per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-Coursebook-v2.pdf
> )

That workbook is from almost 5 years ago. An eternity in the OSS space.
I would suggest not using it -- it's out of date!

[Bertilla Theodore]

Yes I am aware that the document is out of date, but since I didn't come
across another guide on how to add XCCDF and OVAL contents, I was referring
to the old one. I now realize that SSG has come a long way after that.

On 21 June 2017 at 18:14, Shawn Wells  wrote:
> On 6/21/17 1:05 PM, Bertilla Theodore wrote:
> > Yes, I thought so too. But I am not able to figure out what's wrong.
> > For one, the following is the exact content added to integrity.xml (
> > as
> > per http://people.redhat.com/jamisonm/scap/SCAP-Workshop-
>
> Coursebook-v2.pdf
> > )
>
> That workbook is from almost 5 years ago. An eternity in the OSS space.
> I would suggest not using it -- it's out of date!
> _______________________________________________
> scap-security-guide mailing list -- scap-security-guide@lists.
> fedorahosted.org
> To unsubscribe send an email to scap-security-guide-leave@
> lists.fedorahosted.org