As a user, I couldn't figure out how to do this using command line
The code for the FIPS stripping is at
and you may be able to figure out how to graft in some Python to do what
you need from that.
That said, what is the benefit of stripping out everything else besides
On Mon, Mar 11, 2019 at 9:57 AM Alexander Bergmann <abergmann(a)suse.com>
I'm currently checking if it is possible to strip down everything
unneeded from a generated XCCDF, OVAL or DS file or to include just the
needed rules and OVAL definitions for a certain profile during
When I generate the rhel7/sle12 output after running the cmake script,
all profiles are included inside the XCCDF and DS files.
Furthermore all OVAL definitions get included even if they are not part
of any listed profile. I understand that this are two pair shoes. I'm
just curious if there is a way to limit the OVAL output only to those
definitions that are actually needed for the defined profiles.
So, is it possible to limit the output generation to a single profile
and to limit the OVAL output as well?
This is interesting especially for the DS output where I want to have a
small file with all needed tests and definitions for just one profile.
Any hint or direction is appreciated. ;)
Alexander Bergmann <abergmann(a)suse.com>, Security Engineer, GPG:9FFA4886
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton
HRB 21284 (AG Nürnberg)
-----BEGIN PGP SIGNATURE-----
-----END PGP SIGNATURE-----
scap-security-guide mailing list --
To unsubscribe send an email to
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --