On 8/17/17 1:02 PM, Paige, David B CTR USARMY ICOE (US) wrote:
> The DISA STIGViewer isn't about to correlate the Redhat STIG with any of the items from a Rhel/CentOS xml file created by openscap. This means that all of the items must be updated manually.
>
> Would it be possible to get the output to be recognized by the DISA STIGViewer? I'm not sure what openscap does differently from the SPAWAR SCC tool, which can be imported into the STIGViewer.
>
> The openscap xml output is also not processed by the vulnerator tool, but it will handle the SCC xml files.
OpenSCAP generates SCAP content. STIGViewer (and SCC) built in DISA's
proprietary extensions/formats.
In theory this would be a matter of applying an XSLT to restructure the
properly formatted SCAP results into whatever DISA needs.
_______________________________________________
scap-security-guide mailing list -- scap-security-guide@lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave@lists.fedorahosted.org