Invalid Output using the scap-security-guide-0.1-6.noarch.rpm

Bueschel, Eric W CTR (US) eric.w.bueschel.ctr at mail.mil
Wed Oct 31 23:19:19 UTC 2012


Just upgraded from the 0.1-1 rpm to the 0.1-6 rpm.  System is a RHEL 6.3
system, openscap-utils is version 8.0. I am attempting to run, from the
/usr/share/xml/scap//ssg/content directory:

oscap xccdf eval --profile server --results xccdf-results.xml
ssg-rhel6-xccdf.xml


I have also tried the stig-server profile.  In each case the results field
is "null".  It also generates multiple errors at the end of the eval:

1 1871 In file 'xccdf-results.xml' on line 15992: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 15995: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 15998: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 16001: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 16008: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 16011: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 16014: Element
'{http://checklists.nist.gov/xccdf/1.1}ident': This element is not expected.
Expected is ( {http://checklists.nist.gov/xccdf/1.1}result ).
1 1871 In file 'xccdf-results.xml' on line 16769: Element
'{http://checklists.nist.gov/xccdf/1.1}TestResult': Missing child
element(s). Expected is one of (
{http://checklists.nist.gov/xccdf/1.1}rule-result,
{http://checklists.nist.gov/xccdf/1.1}score ).
XCCDF Results are NOT exported correctly.
OpenSCAP Error: Selector ID(ensure_logrotate_activated) does not exist in
Benchmark.

The prior version, 0.1-1, generated a useful output which I was able to
convert to a useable document with:

oscap xccdf generate report xccdf-results.xml > $HOSTNAME-openscap.html


I would appreciate any help possible,

Eric B
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5649 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20121031/f038e34d/attachment.bin>


More information about the scap-security-guide mailing list