Attempting to use the RHEL 8 data streams, but even 'oscap info' fails
using the latest release [0]:
# oscap info /usr/share/xml/scap/ssg/content/ssg-rhel8-ds-1.3.xml
Document type: Source Data Stream
Imported: 2019-06-02T11:16:07
Stream: scap_org.open-scap_datastream_from_xccdf_ssg-rhel8-xccdf-1.2.xml
Generated: (null)
Version: 1.3
Checklists:
Ref-Id: scap_org.open-scap_cref_ssg-rhel8-xccdf-1.2.xml
WARNING: Datastream component
'scap_org.open-scap_cref_security-data-oval-com.redhat.rhsa-RHEL8.xml.bz2'
points out to the remote
'https://www.redhat.com/security/data/oval/com.redhat.rhsa-RHEL8.xml.bz2'.
Use '--fetch-remote-resources' option to download it.
WARNING: Skipping
'https://www.redhat.com/security/data/oval/com.redhat.rhsa-RHEL8.xml.bz2'
file which is referenced from datastream
OpenSCAP Error: Could not extract
scap_org.open-scap_cref_ssg-rhel8-xccdf-1.2.xml with all dependencies
from datastream. [ds_sds_session.c:211]
Looking at the ssg-rhel8-ds-1.3 file there are lots of mentions to SCAP
1.2 instead of 1.3?
[0]
https://github.com/ComplianceAsCode/content/releases/download/v0.1.44/sca...