I'm trying to use scap-workbench to run the Upstream STIG for RHEL6
Workstation profile and it explicitly wants the RHEL6 OVAL as a remote
resource,
http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_6.xml.
If I check "Fetch remote resources" then, of course, the scans and
remediation work as expected but how can i get the entire benchmark to run
offline? Can I download the oval info ahead of time and place it in a
specific location?
----------
Chuck Atkins
Staff R&D Engineer, Scientific Computing
Kitware, Inc.
(518) 881-1183