Every single check is hard coded to look for the platform Red Hat Enterprise Linux 6 (and in some cases now, Fedora and RHEL 7 as well). You need a different identifier for CentOS. A glance at the CPE dictionary at cpe.mitre.org suggests that the cpe value is "cpe:/o:centos:centos:6" which has the human readable name CentOS-6. Navigate to scap-security-guide/RHEL/6/input/checks and open a check. Near the top, you'll see an XML section, affected. The <platform> tag is key. Note that the <platform> tag inside is set to Red Hat Enterprise Linux 6. That's why you get not applicable when you run the commands as is.

- Maura Dailey

On 06/17/2014 05:01 PM, Pettorino, Jeffrey D CTR USAF USAFA USAFA/DFAN wrote:
I have been trying to get oscap working on my CentOS6.5 network core,
without luck.

Everything comes back with "Result notapplicable".

I am pretty new to SCAP and XCCDF, but am a long-time user of Nessus and
Security Center (prior to ACAS program by DISA).

Does anyone have suggestions where I can find some in depth guidance to
adjust the rhel6 configs to CentOS?

--
Jeff

v/r,
Jeffrey D. Pettorino, GCIH, CISSP
Systems Engineer
High Performance Computing Research Center
United States Air Force Academy
Jeffrey.Pettorino.ctr@USAFA.edu
719/333-9391
----
The use of the Unix philosophy just for UNIX was a great waste.
Fortunately, Linux came along.
- Bellevue Linux User Group member, 2005




_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide