Every single check is hard coded to
look for the platform Red Hat Enterprise Linux 6 (and in some
cases now, Fedora and RHEL 7 as well). You need a different
identifier for CentOS. A glance at the CPE dictionary at
cpe.mitre.org suggests that the cpe value is
"cpe:/o:centos:centos:6" which has the human readable name
CentOS-6. Navigate to scap-security-guide/RHEL/6/input/checks and
open a check. Near the top, you'll see an XML section, affected.
The <platform> tag is key. Note that the <platform>
tag inside is set to Red Hat Enterprise Linux 6. That's why you
get not applicable when you run the commands as is.
- Maura Dailey
On 06/17/2014 05:01 PM, Pettorino, Jeffrey D CTR USAF USAFA
I have been trying to get oscap working on my CentOS6.5 network core,
Everything comes back with "Result notapplicable".
I am pretty new to SCAP and XCCDF, but am a long-time user of Nessus and
Security Center (prior to ACAS program by DISA).
Does anyone have suggestions where I can find some in depth guidance to
adjust the rhel6 configs to CentOS?
Jeffrey D. Pettorino, GCIH, CISSP
High Performance Computing Research Center
United States Air Force Academy
The use of the Unix philosophy just for UNIX was a great waste.
Fortunately, Linux came along.
- Bellevue Linux User Group member, 2005
scap-security-guide mailing list