I appreciate all the work being done to develop RHEL6 content.  Thanks to everyone!

My question is based on this....  I'll be reaching a point of testing a number of RHEL5/6 systems in bulk with openscap.  Initially of course they'll be offline, development and/or non-production systems.  OS versions would be a diverse smattering of RHEL 5.7, 5.8, 5.9 (when it comes out), 6.1, 6.2, 6.3 and 6.4 (when it comes out).  Architecture would be both intel 32 and 64 bits.  Most (if not all?) of these hosts would not have openscap.rpms already installed.  I can readily envision full customer production systems expressly NOT having openscap.rpms installed on them at all, ever.

-  Can a single edition (preferably the latest) of openscap combined with the latest content be 'brought' into the RHEL test/dev hosts and be successful in executing for scoring/assessment?
-  Has anyone tried this yet?

This 'bringing in' would not be via RPM nor yum, but as an expanded gzipped tar file that is made available on an NFS share, so it was centrally available (for example).  At that point execution could bring the benefits of modern openscap to site/host assessment, while not perturbating the customers' environment.  Proving this works in test/dev, gives value to going forward with application against production systems that customers will not want changed, to the greatest extent possible.  Another reason is that one cannot assume much less ensure any given 'environment to be tested' will have a yum repo available, nor that it would have the correct/right edition of openscap to install, via RPM, if the system owners would even permit it at the time of assessment.

Thanks,
R,
-Joe