Please see attached for requested full output.
Utilizing your zip, I loaded the benchmark 'ssg-rhel6-oval.xml' and set the
Profile to "stig-rhel6-server" and it seemed to run well in the SPAWAR SCC,
(though it presented me with a sub-par compliance rating of 43% - ughhh!)
The other Content option presented was 'eap5', which did not run so well - kicked
multiple errors and did not complete.
As these were the only presented OVAL files when selecting SCAP Content, I'm assuming
the others I noted in zip were for alternate tools???
________________________________________
From: scap-security-guide-bounces(a)lists.fedorahosted.org
[scap-security-guide-bounces(a)lists.fedorahosted.org] On Behalf Of Shawn Wells
[shawn(a)redhat.com]
Sent: Tuesday, April 23, 2013 4:30 PM
Cc: scap-security-guide(a)lists.fedorahosted.org
Subject: Re: RHEL6
On 4/23/13 8:14 AM, Moessbauer, David wrote:
I had conducted the steps found
athttps://fedorahosted.org/scap-security-guide/ under the 'Consume' header, which
at quick review appear to be same as you provided. At the completion of each of the
'wget...' cmds, I was presented with a restatement of the URL along with
"Scheme missing". When I issued the "...yum install..." cmd the
on-screen display was as follows:
'Loaded plugins: product-id, refresh-packetkit, security, subscription-manger
Updating certificate-based repositories.
Unable to read consumer identity
Setting up Install Process
No package scap-security-guide available.
Error: Nothing to do'
Not sure where this went sideways... I will continue to investigate.
Odd. If you can copy/paste the full output that'd be most helpful. Also,
the output of `cat /etc/redhat-release; rpm -qv yum-utils; rpm -qv wget`
None-the-less, have downloaded your zip - thank you!
One last question; in this zip I note several OVAL files...which is the applicable to run
as benchmark? Assuming 'ssg-rhel6-oval.xml' but not certain.
To be upfront,
we're still figuring out how to properly drop ZIP
releases. Many tools expect everything to extract in a single directory,
such as SPAWAR SCC (which is current behavior), while others are
appropriately designed to look under /usr/share/xml/scap/. Feedback is
most welcome.
Once extracted you should be able to follow the usage guide, but
remember to replace the full paths with your working dir:
https://fedorahosted.org/scap-security-guide/wiki/usageguide
_______________________________________________
scap-security-guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide