That is the URL where I found the command.  I just happened to try the common profile in addition to the stig-rhel6-server profile.  Both yield the same result showing "notapplicable".


Logan Rodrian



From: scap-security-guide-bounces@lists.fedorahosted.org [scap-security-guide-bounces@lists.fedorahosted.org] on behalf of Shawn Wells [shawn@redhat.com]
Sent: Wednesday, March 06, 2013 19:53
To: scap-security-guide@lists.fedorahosted.org
Subject: EXT :Re: scap-security-guide 0.1-10 help

On 3/6/13 5:19 PM, Rodrian, Logan P (IS) wrote:

I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10.  I have tried simply applying the v0.1-10 rpm and importing that content into secstate.  When running a profile (no matter which is selected), the report shows that none of the rules have been selected.  Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:

oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
...and then all output shows "Result notapplicable".
I haven't used the secstate tool much recently, so I can't address that... but as for the oscap command above, where on the webpage did you find it? That's an outdated invocation and needs to be updated.

Here's the current usage guide: https://fedorahosted.org/scap-security-guide/wiki/usageguide