Not sure these are FAQ's, more HOWTO's but I'll take a stab at it.
How do I install SCAP
How do I use SCAP to remediate conditions
How do I edit or create my own SCAP Policy
Where can I find other SCAP profiles? [different public sources of xccdf
scap profiles]
Is there a way to detect exposure to a cve [CVE-2014-7169]?
What tooling is available for scap [SCAP Workbench, ..., ...]?
On 26/03/15 04:04, Shawn Wells wrote:
There are still many questions around using SCAP, such as the SCAP
for
CVE scanning thread a few days ago.
To begin documenting FAQs -- both for the OpenSCAP/SSG pages, and formal
Red Hat documentation -- I've started to document common questions here:
https://github.com/OpenSCAP/scap-security-guide/wiki/What-should-go-into-...
What other topics/questions should be covered? Feel free to edit the
wiki directly or reply to the list! This feedback will be driven into
our wikis/manuals, and formal docs off
redhat.com.
Don't limit to use SSG.... broader questions on how to store SCAP data,
using OpenSCAP, how policy is developed all make sense!