On Sun, Nov 16, 2014 at 11:10 AM, Martin Preisler <mpreisle@redhat.com> wrote:
----- Original Message -----
> From: "Grant Schoep" <matobinder@gmail.com>
> To: "SCAP Security Guide" <scap-security-guide@lists.fedorahosted.org>
> Sent: Sunday, November 16, 2014 6:48:09 PM
> Subject: Re: First time running openscap, getting notapplicable
>
> On Sun, Nov 16, 2014 at 8:48 AM, Martin Preisler <mpreisle@redhat.com>
> wrote:
>
> [snip]
>
>         <collected_objects>
>           <object id="oval:org.open-scap.cpe.fedora-release:obj:2"
> version="1" flag="not collected">
>             <message level="warning">OVAL object not supported</message>
>           </object>
>           <object id="oval:org.open-scap.cpe.redhat-release:obj:1"
> version="1" flag="not collected">
>             <message level="warning">OVAL object not supported</message>
>           </object>
>           <object id="oval:org.open-scap.cpe.redhat-release:obj:3"
> version="1" flag="not collected">
>             <message level="warning">OVAL object not supported</message>
>           </object>
>
>           ...

You built openscap without RPM support. I should have noticed from `oscap --v`
but I missed it. The rpm probe is used to determine CPE platform applicability.

You need rpm-devel if I recall correctly and then rebuild openscap.


Awesome, that did it, installing rpm-devel got me working. I now get results from the provided scap-rhel6-xccdf.xml file. Nice to see green pass and red fails!

Now I get the "notchecked" as you had expected from the DISA file from
> Downloaded "Red Hat 5 Manual STIG - Version 1, Release 8"
> from http://iase.disa.mil/stigs/os/unix-linux/Pages/red-hat.aspx


Well, got me going so far.