On 3/6/13 5:19 PM, Rodrian, Logan P (IS) wrote:
*
I am attempting a secstate audit and would like to use the newly
released scap-security-guide v0.1-10. I have tried simply applying
the v0.1-10 rpm and importing that content into secstate. When
running a profile (no matter which is selected), the report shows that
none of the rules have been selected. Backing up a layer, I simply
tried the instructions on the scap-security-guide webpage of running:
oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
...and then all output shows "Result notapplicable".
I haven't used
the secstate tool much recently, so I can't address
that... but as for the oscap command above, where on the webpage did you
find it? That's an outdated invocation and needs to be updated.
Here's the current usage guide:
https://fedorahosted.org/scap-security-guide/wiki/usageguide