Going through the SCAP & STIG Workshop March 2013 I learned that I can
generate a shell script to fix items that were discovered during the
scan:
# oscap xccdf generate fix --result-id
xccdf_org.open-scap_testresult_stig-rhel6-server
/var/www/html/studentX-results.xml
Is it possible to generate a shell script that has all the available
remediations regardless of a pass or fail. In other words I want to
generate a remediation shell script that doesn't rely on the output
results file, but has every remediation that is available in the xccdf
included in the shell script.