----- Original Message -----
From: "Trey Henefield"
<trey.henefield(a)ultra-ats.com>
To: "SCAP Security Guide" <scap-security-guide(a)lists.fedorahosted.org>
Sent: Thursday, May 22, 2014 11:12:25 PM
Subject: RE: "notapplicable" in scap results?
You need a modified cpe-oval. Simply change redhat-release to centos-release.
See the attached example, as pulled from the RHEL5 STIG.
Hi,
I will just reiterate that we are happy to accept patches! This would involve adding
CentOS 5 and 6 to CPE and CPE OVAL files that come with openscap. See
https://git.fedorahosted.org/cgit/openscap.git/tree/cpe
This would be a proper fix, much cleaner than the proposed hack.
--
Martin Preisler (from openscap upstream)