On Sun, Nov 16, 2014 at 11:10 AM, Martin Preisler <mpreisle(a)redhat.com>
wrote:
----- Original Message -----
> From: "Grant Schoep" <matobinder(a)gmail.com>
> To: "SCAP Security Guide"
<scap-security-guide(a)lists.fedorahosted.org>
> Sent: Sunday, November 16, 2014 6:48:09 PM
> Subject: Re: First time running openscap, getting notapplicable
>
> On Sun, Nov 16, 2014 at 8:48 AM, Martin Preisler <mpreisle(a)redhat.com>
> wrote:
>
> [snip]
>
> <collected_objects>
> <object id="oval:org.open-scap.cpe.fedora-release:obj:2"
> version="1" flag="not collected">
> <message level="warning">OVAL object not
supported</message>
> </object>
> <object id="oval:org.open-scap.cpe.redhat-release:obj:1"
> version="1" flag="not collected">
> <message level="warning">OVAL object not
supported</message>
> </object>
> <object id="oval:org.open-scap.cpe.redhat-release:obj:3"
> version="1" flag="not collected">
> <message level="warning">OVAL object not
supported</message>
> </object>
>
> ...
You built openscap without RPM support. I should have noticed from `oscap
--v`
but I missed it. The rpm probe is used to determine CPE platform
applicability.
You need rpm-devel if I recall correctly and then rebuild openscap.
Awesome, that did it, installing rpm-devel got me working. I now get
results from the provided scap-rhel6-xccdf.xml file. Nice to see green pass
and red fails!
Now I get the "notchecked" as you had expected from the DISA file from
Downloaded "Red Hat 5 Manual STIG - Version 1, Release 8"
from
http://iase.disa.mil/stigs/os/unix-linux/Pages/red-hat.aspx
Well, got me going so far.