I am attempting something here, and I don't know if I am even doing it correctly, but it isn't working, so I wanted to give a shout to see if anyone could shed some light on it.
I have a system installed from the CLIP 6.3 baseline, which has the following installed versions:
* openscap* => 0.9.1-1 * secstate => 0.6.0-1 * scap-security-guide => 1.0-git.4d28ff3
I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10. I have tried simply applying the v0.1-10 rpm and importing that content into secstate. When running a profile (no matter which is selected), the report shows that none of the rules have been selected. Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:
oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
...and then all output shows "Result notapplicable".
So, my questions are as follows:
* Can I simply use the v0.1-10 content without any other upgrades? * If not, what versions of the other components/dependencies are needed to execute this version? * If so, what am I missing to allow the selection of the rules within a given profile?
Thanks in advance.
Logan Rodrian
I am attempting something here, and I don't know if I am even doing it correctly, but it isn't working, so I wanted to give a shout to see if anyone could shed some light on it.
I have a system installed from the CLIP 6.3 baseline, which has the following installed versions:
* openscap* => 0.9.1-1 * secstate => 0.6.0-1 * scap-security-guide => 1.0-git.4d28ff3
I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10. I have tried simply applying the v0.1-10 rpm and importing that content into secstate. When running a profile (no matter which is selected), the report shows that none of the rules have been selected. Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:
oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
...and then all output shows "Result notapplicable".
So, my questions are as follows:
* Can I simply use the v0.1-10 content without any other upgrades? * If not, what versions of the other components/dependencies are needed to execute this version? * If so, what am I missing to allow the selection of the rules within a given profile?
Thanks in advance.
Logan Rodrian
On 3/6/13 5:19 PM, Rodrian, Logan P (IS) wrote:
I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10. I have tried simply applying the v0.1-10 rpm and importing that content into secstate. When running a profile (no matter which is selected), the report shows that none of the rules have been selected. Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:
oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml ...and then all output shows "Result notapplicable".
I haven't used the secstate tool much recently, so I can't address that... but as for the oscap command above, where on the webpage did you find it? That's an outdated invocation and needs to be updated.
Here's the current usage guide: https://fedorahosted.org/scap-security-guide/wiki/usageguide
scap-security-guide@lists.fedorahosted.org
-
Rodrian, Logan P (IS) -
Shawn Wells