----- Original Message -----
From: "phil barone" <phil.barone(a)gmail.com>
Sent: Friday, July 15, 2016 2:17:25 PM
Subject: Auditing Security Vulnerabilities of Centos Products
I am researching ways to Audit Security Vulnerabilities on Centos using the
practical example here:
It shows the use of openscap with com.redhat.rhsa-all.xml and
I have configured a Centos 6.5 system with openscap and scanner 1.2.8.
The scans run, without any noticeable errors, but it is saying that all tests
Is this a suitable way to scan for vulnerabilities against installed products
on Centos as well as redhat systems?
as far as I know nobody is providing a CVE OVAL feed for CentOS. You need
a CentOS feed and not the RHEL feed to check vulnerabilities.
Therefore, at the moment, it's not possible to check for CentOS vulnerabilities
Identity Management and Platform Security | Red Hat, Inc.