Common OVAL code (like for asserting for uninstalled services)
Steve Grubb
sgrubb at redhat.com
Thu Aug 1 18:11:46 UTC 2013
On Thursday, August 01, 2013 01:59:18 PM Gary Gapinski wrote:
> This looks quite nice, Simon.
>
> I have not yet had a chance to do a detailed inspection, but a question
> arises.
>
> Would such techniques fail for (other than OpenSCAP) compliance scanners
> that employ ovaldi rather than a strict OVAL implementation?
OVAL variable support is a certification requirement for any SCAP 1.2 scanner.
Its in the 7511 as SCAP.T.2000.5. So, any validated scanner should handle it.
-Steve
More information about the scap-security-guide
mailing list