On Mon, 2012-11-19 at 13:24 +0100, Thorsten Scherf wrote:
On [Mon, 19.11.2012 10:57], Simon Lukasik wrote:
>On 11/19/2012 10:44 AM, Peter Gustafsson wrote:
>> I only get (null) result on almost all test when using
>> scap-security-guide-0.1-6 or scap-security-guide-0.1-7.
>>
>> I'm executing the test on a rhel 6.3 box having below version of
>> openscap installed:
>> openscap-utils-0.8.0-2.el6.x86_64
>> openscap-0.8.0-2.el6.x86_64
[...]
>Most probably you are hitting issue described at
>
>https://www.redhat.com/archives/open-scap-list/2012-October/msg00022.html
>
>Scap-security-guide project started to use SCAP features which are not
>supported by OpenSCAP version in rhel6.3. Basically I can see following
>options:
>
> - use an older snapshot of scap-security-guide
> - wait for rhel6.4 update of openscap
> - use fixed (but unofficial) build of openscap
> - remove problematic bits from SSG content (remove all ocil checks)
It worked using the unofficial build of openscap. However i'm executing
the scans from a satellite server, so the spacewalk-oscap package must
be updated to support --cpe-dict parameter as well, do you know if that
is planed for 6.4 ?
Any chances the fix will make it into the RHEL-6.3 stream?!
Cheers,
Thorsten
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide