Hello Phil,

It is nothing to be concerned about. Basically, the warning message is letting you know that the OpenSCAP scan cannot download the latest CVE OVAL file from redhat.com which makes sense as the system cannot access the internet.

Thanks,

Gabe

On Mon, Jul 11, 2016 at 12:59 PM, <phil.barone@gmail.com> wrote:
 Linux somehost.net 2.6.32-431.23.3.el6.x86_64 #1 SMP Thu Jul 31 17:20:51 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux

openscap-1.2.8-2.el6.centos.x86_64
openscap-scanner-1.2.8-2.el6.centos.x86_64
scap-security-guide-0.1.28-2.el6.noarch

This box is not accessible to the internet.

I am getting this warning below and am not sure if I should be concerned. Is there some other level of reporting that I am missing because of this? Is there a fix i can perform to identify this file locally?

[root@tvm01 openscap]# oscap xccdf eval --profile server --report report1.html --results results1.xml --cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml >ttt1
WARNING: Skipping http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_6.xml file which is referenced from XCCDF content
--
SCAP Security Guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/scap-security-guide@lists.fedorahosted.org
https://github.com/OpenSCAP/scap-security-guide/