I am attempting something here, and I don't know if I am even doing it correctly, but it isn't working, so I wanted to give a shout to see if anyone could shed some light on it.

I have a system installed from the CLIP 6.3 baseline, which has the following installed versions:
  • openscap* => 0.9.1-1
  • secstate => 0.6.0-1
  • scap-security-guide => 1.0-git.4d28ff3

I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10.  I have tried simply applying the v0.1-10 rpm and importing that content into secstate.  When running a profile (no matter which is selected), the report shows that none of the rules have been selected.  Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:

oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
...and then all output shows "Result notapplicable".


So, my questions are as follows:
  • Can I simply use the v0.1-10 content without any other upgrades?
  • If not, what versions of the other components/dependencies are needed to execute this version?
  • If so, what am I missing to allow the selection of the rules within a given profile?


Thanks in advance.


Logan Rodrian