[PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp
Shawn Wells
shawn at redhat.com
Tue Sep 10 17:48:05 UTC 2013
On 9/10/13 1:44 PM, leam hall wrote:
> Ah, I need to figure out how to have the SSG just check for STIG
> findings. Cool.
A great writeup:
http://myopensourcelife.com/2013/09/08/scap-and-remediation/
In short, assuming you have the SSG RPM installed:
oscap xccdf eval --profile stig-rhel6-server \
--results /tmp/`hostname`-stig-results.xml \
--report /tmp/`hostname`-stig-report.html \
--cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130910/85810938/attachment.html>
More information about the scap-security-guide
mailing list