Hello Phil,
It is nothing to be concerned about. Basically, the warning message is
letting you know that the OpenSCAP scan cannot download the latest CVE OVAL
file from
redhat.com which makes sense as the system cannot access the
internet.
Thanks,
Gabe
On Mon, Jul 11, 2016 at 12:59 PM, <phil.barone(a)gmail.com> wrote:
Linux
somehost.net 2.6.32-431.23.3.el6.x86_64 #1 SMP Thu Jul 31
17:20:51
UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
openscap-1.2.8-2.el6.centos.x86_64
openscap-scanner-1.2.8-2.el6.centos.x86_64
scap-security-guide-0.1.28-2.el6.noarch
This box is not accessible to the internet.
I am getting this warning below and am not sure if I should be concerned.
Is there some other level of reporting that I am missing because of this?
Is there a fix i can perform to identify this file locally?
[root@tvm01 openscap]# oscap xccdf eval --profile server --report
report1.html --results results1.xml --cpe
/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml >ttt1
WARNING: Skipping
http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_6.xml
file which is referenced from XCCDF content
--
SCAP Security Guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/admin/lists/scap-security-guide@lists.fedo...
https://github.com/OpenSCAP/scap-security-guide/