Generate Fix

joescap at mm.st joescap at mm.st
Sun Dec 15 19:45:10 UTC 2013


Going through the SCAP & STIG Workshop March 2013 I learned that I can
generate a shell script to fix items that were discovered during the
scan:
# oscap xccdf generate fix --result-id
xccdf_org.open-scap_testresult_stig-rhel6-server
/var/www/html/studentX-results.xml

Is it possible to generate a shell script that has all the available
remediations regardless of a pass or fail.  In other words I want to
generate a remediation shell script that doesn't rely on the output
results file, but has every remediation that is available in the xccdf
included in the shell script.


More information about the scap-security-guide mailing list