Every single check is hard coded to look for the platform Red Hat
Enterprise Linux 6 (and in some cases now, Fedora and RHEL 7 as well).
You need a different identifier for CentOS. A glance at the CPE
dictionary at
cpe.mitre.org suggests that the cpe value is
"cpe:/o:centos:centos:6" which has the human readable name CentOS-6.
Navigate to scap-security-guide/RHEL/6/input/checks and open a check.
Near the top, you'll see an XML section, affected. The <platform> tag is
key. Note that the <platform> tag inside is set to Red Hat Enterprise
Linux 6. That's why you get not applicable when you run the commands as is.
- Maura Dailey
On 06/17/2014 05:01 PM, Pettorino, Jeffrey D CTR USAF USAFA USAFA/DFAN
wrote:
I have been trying to get oscap working on my CentOS6.5 network
core,
without luck.
Everything comes back with "Result notapplicable".
I am pretty new to SCAP and XCCDF, but am a long-time user of Nessus and
Security Center (prior to ACAS program by DISA).
Does anyone have suggestions where I can find some in depth guidance to
adjust the rhel6 configs to CentOS?
--
Jeff
v/r,
Jeffrey D. Pettorino, GCIH, CISSP
Systems Engineer
High Performance Computing Research Center
United States Air Force Academy
Jeffrey.Pettorino.ctr(a)USAFA.edu
719/333-9391
----
The use of the Unix philosophy just for UNIX was a great waste.
Fortunately, Linux came along.
- Bellevue Linux User Group member, 2005
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide