its because the XCCDF test ensure_gpgcheck_globally_activated (in file "system/software/updating.xml") references an unknown/non-existent OVAL check (yum_gpgcheck_global_activation).

I solved this by changing yum_gpgcheck_global_activation to "ensure_gpgcheck_globally_activated" (which is the valid OVAL check ref id in checks/ensure_gpgcheck_globally_activated.xml)  in file "system/software/updating.xml"

Find diff file in attachment.



On Mon, Mar 31, 2014 at 7:32 PM, Delorenzo, Michael A CIV USARMY ARDEC (US) <> wrote:

Hello everyone,


I noticed that after a newer git pull this referenced check is now set as not checked, when it previously was checked.  I can’t seem to find an explanation in the mailing list emails.  Does anyone have any explanation?




Michael DeLorenzo

Computer Scientist

Picatinny Arsenal

Business Transformation & E-Systems Office, RDAR-WSE, Building 93

W:  (973)-724-1370

BB: (862)-432-6071


scap-security-guide mailing list