using SCC/CSCC with SSG content

Shawn Wells shawn at redhat.com
Wed Nov 7 02:55:22 UTC 2012


On 11/6/12 10:16 AM, Brian Peake wrote:
> Thanks for the info Peter! I will get back when I get some time, hopefully
> tomorrow, with some examples.


I was able to run a scan tonight using the latest git clone of SSG 
against the SCC tool. I've posted the output here:
http://people.redhat.com/swells/random/cscc.out.txt

oscap output of the same content here:
http://people.redhat.com/swells/random/oscap.out.txt

I'll drop the OVAL results somewhere shortly -- it generated 300MB of 
output!! Try not to laugh (cry?) at all our OVAL errors. Please keep in 
mind we haven't made OVAL a focus yet!

Also, SCC took forever to run on a 2x 2.4GHz 6GB RAM virtual machine:
real    21m59.028s
user    21m17.791s
sys    0m33.558s

Compared against oscap:
real    0m39.854s
user    0m27.210s
sys    0m12.671s


More information about the scap-security-guide mailing list