On 9/10/13 1:44 PM, leam hall wrote:
Ah, I need to figure out how to have the SSG just check for STIG findings. Cool.

A great writeup:
http://myopensourcelife.com/2013/09/08/scap-and-remediation/


In short, assuming you have the SSG RPM installed:
oscap xccdf eval --profile stig-rhel6-server \
--results /tmp/`hostname`-stig-results.xml \
--report /tmp/`hostname`-stig-report.html \
--cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml