On 5/13/14, 8:20 AM, Shaw, Ray V CTR USARMY ARL (US) wrote:
Classification: UNCLASSIFIED
Caveats: NONE
Unfortunately, I'm not aware of a way to do that. You just get to select your
XCCDF and the stream you want, and SCC kind of does its thing (or doesn't, in
this case); the other files aren't specified explicitly as they are with
OpenSCAP. It just has them all and decides what to do with them. I tried
moving the cpe-oval file out of /opt/scc/Resources/Content, but then it just
complained, used its generic CPE dictionary, and failed anyway.
I also tried loading ssg-rhel6-oval.xml as OVAL content, and running a scan
that way, but that comes up with:
[ERROR] Could not find the external variables file for "ssg-rhel6-oval".
And yes, definitely running RHEL :p I've tried it on a few different systems,
both Workstation and Server.
Strange. The SCC guys and I traded EMails last night, they're sending
over the latest SCC build. The SSG community has a good relationship
with that team, many even beta test their releases, making this odd.
Will ping the list once I've the latest version downloaded (hopefully
today).