Using the oscap from openscap 0.9.3-1 and the ssg content fresh from the repo (0.1-12) I ran:

oscap xccdf eval --profile stig-rhel6-server --results `hostname`-ssg-results.xml --report `hostname`-ssg-results.html --cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml

on my server. The output gave me stuff to work on and what seems to be a list of false positives. I have not found these items in the STIG. Could someone point me to them, or can we remove them from the scan if they are not present?

I'm looking at the git repo but having issues with builds. So some of these might already be fixed.

Thanks!

Leam

#####

Configure auditd admin_space_left Action on Low Disk Space
Disable IPv6 Networking Support Automatic Loading
Disable Kernel Parameter for Accepting ICMP Redirects By Default 
Disable Kernel Parameter for Accepting Secure Redirects By Default      
Disable Kernel Parameter for Accepting Secure Redirects for All Interfaces      
Disable Kernel Parameter for Sending ICMP Redirects by Default      
Disable Modprobe Loading of USB Storage Driver      
Ensure All Files Are Owned by a Group      
Ensure All Files Are Owned by a User     
Ensure auditd Collects Unauthorized Access Attempts to Files (unsuccessful)
Ensure SELinux State is Enforcing
Implement Blank Screen Saver
Record Events that Modify User/Group Information
Set SSH Client Alive Count

--
Mind on a Mission