Common OVAL code (like for asserting for uninstalled services)

Steve Grubb sgrubb at redhat.com
Thu Aug 1 18:11:46 UTC 2013


On Thursday, August 01, 2013 01:59:18 PM Gary Gapinski wrote:
> This looks quite nice, Simon.
> 
> I have not yet had a chance to do a detailed inspection, but a question
> arises.
> 
> Would such techniques fail for (other than OpenSCAP) compliance scanners
> that employ ovaldi rather than a strict OVAL implementation?

OVAL variable support is a certification requirement for any SCAP 1.2 scanner. 
Its in the 7511 as SCAP.T.2000.5. So, any validated scanner should handle it.

 -Steve



More information about the scap-security-guide mailing list