Implementation of openscap

Steve Grubb sgrubb at redhat.com
Fri Sep 14 01:10:57 UTC 2012


On Thursday, September 13, 2012 10:02:51 AM Joe Wulf wrote:
> If I understand what you are saying correctly:  I could install/build
> openscap on late-model editions of RHEL, 6.3 today, and once each for
> relevant architectures (32 and 64 bits).  I would bring the latest edition
> of '/usr/lib64/libopenscap.so.x.x.x' (and the one for x32) along with the
> oscap software and XML content placing them in the NFS mount available to
> all hosts to be assessed.  I would prefix my NFS path to $LD_LIBRARY_PATH. 
> So far, so good, right?

Yep.


> The probes you mentioned would be in an obvious place once I've got openscap
> compiled or installed?  Once I know that location, I'd set $OVAL_PROVE_DIR
> to it.

rpm -ql openscap | grep libexec
 
-Steve


More information about the scap-security-guide mailing list