From redhatrises at gmail.com Fri Dec 9 03:43:50 2016 Content-Type: multipart/mixed; boundary="===============1599588627536659739==" MIME-Version: 1.0 From: Gabe Alford To: scap-security-guide at lists.fedorahosted.org Subject: Re: Problems with adding custom checks Date: Thu, 08 Dec 2016 20:43:36 -0700 Message-ID: In-Reply-To: F69C324C611AE94389095C7138A01FB27D792FB6@bne3-0002mitmbx.corp.mit --===============1599588627536659739== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Hello, Sorry for such a delay in reponse. On Thu, Dec 1, 2016 at 9:54 PM, Michael Ward < Michael.Ward(a)melbourneit.com.au> wrote: > Hey, > > > > I=E2=80=99m hoping someone on this list can point me in the direction of = what I=E2=80=99m > doing wrong.. > > > > We would like to add some custom checks specific to our environment to the > scap-security-guide content. > > > > Since this is the first time I=E2=80=99ve tried to write any OVAL or XCCDF > content, I thought I=E2=80=99d start with a nice simple package installed= check for > RHEL 6 (vmware-tools-core) as a method of learning more about how it all > hangs together. > > > > So I created an OVAL file based on some of the other package installed > ones: > > > > $ cat RHEL/6/input/oval/package_vmware-tools-core_installed.xml > > > > > version=3D"1"> > > > > Package vmware-tools-core Installed > > > > Red Hat Enterprise Linux 6 > > > > The RPM package vmware-tools-core should be > installed. > > > > > > > test_ref=3D"test_package_vmware-tools-core_installed" /> > > > > > > > id=3D"test_package_vmware-tools-core_installed" version=3D"1" > > comment=3D"package vmware-tools-core is installed"> > > > > > > version=3D"1"> > > vmware-tools-core > > > > > > > > > > And created a group / rule for it in xccdf: > > > > $ cat RHEL/6/input/xccdf/system/test.xml > > > > Test Checks > > Test Checks stuff.. > > and stuff... > > > > > > VMWare Tools must be installed > > > > VMWare Tools must be installed on all VMware based VM's. > > > > > > > > > >

> > If the system isn't a VMWare Based VM, this isn't applicable. > >
> > Required package for operational support. > > > >
> > > >
> > > > > > Added a line into the common profile (RHEL/6/input/profiles/common.xml: > > > >