I am attempting something here, and I don't know if I am even doing it correctly, but it isn't working, so I wanted to give a shout to see if anyone could shed some light on it.
I have a system installed from the CLIP 6.3 baseline, which has the following installed versions:
* openscap* => 0.9.1-1
* secstate => 0.6.0-1
* scap-security-guide => 1.0-git.4d28ff3
I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10. I have tried simply applying the v0.1-10 rpm and importing that content into secstate. When running a profile (no matter which is selected), the report shows that none of the rules have been selected. Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:
oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
...and then all output shows "Result notapplicable".
So, my questions are as follows:
* Can I simply use the v0.1-10 content without any other upgrades?
* If not, what versions of the other components/dependencies are needed to execute this version?
* If so, what am I missing to allow the selection of the rules within a given profile?
Thanks in advance.
Logan Rodrian