It currently isn't possible, and we don't have any template there.
But I have found that the --stig-viewer option has been updated and the
latest version of the man page says:
Writes XCCDF results into FILE in a format readable by DISA STIG Viewer. See
. This option
should be used to generate results for DISA STIG Viewer older than 2.6. To
use DISA STIG Viewer 2.6 or newer, use --results instead.
From this, it seems to me it's enough to generate the XCCDF results
using '--results results.xml' option and STIG Viewer should be able to
consume them. I haven't tried that myself, though.
Security Technologies | Red Hat, Inc.
----- Original Message -----
> From: "James Cassell" <fedoraproject(a)cyberpear.com>
> To: "SCAP Security Guide List"
> Sent: Friday, March 22, 2019 9:37:41 PM
> Subject: Generate '--stig-viewer' results from '--results-arf'
> I see that I can generate a report after the fact by using the 'oscap
> generate report' command with the results xml. Can I generate STIG
> Viewer-compatible output after the fact, as well?
> My use case is to run the ssg benchmark against a RHEL 6 system that has a
> old version of openscap, then move those results to a system with the
> current version to do the conversion.
> I've also had to do this with a RHEL 7.3 system, in which case I was able to
> workaround the issues by re-building the newest openscap SRPM against RHEL
> 7.3, but that's not a very clean solution and results in an unsupported
> package being installed on the system.
> Is there a template somewhere that will allow the 'oscap generate custom'
> output the equivalent of '--stig-viewer' from a results xml file?
> Thanks for any insight!
> James Cassell
> scap-security-guide mailing list --
> To unsubscribe send an email to
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: