Every single check is hard coded to look for the platform Red Hat Enterprise Linux 6 (and in some cases now, Fedora and RHEL 7 as well). You need a different identifier for CentOS. A glance at the CPE dictionary at cpe.mitre.org suggests that the cpe value is "cpe:/o:centos:centos:6" which has the human readable name CentOS-6. Navigate to scap-security-guide/RHEL/6/input/checks and open a check. Near the top, you'll see an XML section, affected. The <platform> tag is key. Note that the <platform> tag inside is set to Red Hat Enterprise Linux 6. That's why you get not applicable when you run the commands as is.

- Maura Dailey

On 06/17/2014 05:01 PM, Pettorino, Jeffrey D CTR USAF USAFA USAFA/DFAN wrote:
I have been trying to get oscap working on my CentOS6.5 network core,
without luck.

Everything comes back with "Result notapplicable".

I am pretty new to SCAP and XCCDF, but am a long-time user of Nessus and
Security Center (prior to ACAS program by DISA).

Does anyone have suggestions where I can find some in depth guidance to
adjust the rhel6 configs to CentOS?


Jeffrey D. Pettorino, GCIH, CISSP
Systems Engineer
High Performance Computing Research Center
United States Air Force Academy
The use of the Unix philosophy just for UNIX was a great waste.
Fortunately, Linux came along.
- Bellevue Linux User Group member, 2005

scap-security-guide mailing list