[PATCH] New check uses /etc/mtab and mount partition check to look for bind mount on /var/tmp

Shawn Wells shawn at redhat.com
Tue Sep 10 17:48:05 UTC 2013


On 9/10/13 1:44 PM, leam hall wrote:
> Ah, I need to figure out how to have the SSG just check for STIG 
> findings. Cool. 

A great writeup:
http://myopensourcelife.com/2013/09/08/scap-and-remediation/


In short, assuming you have the SSG RPM installed:

oscap xccdf eval --profile stig-rhel6-server \
--results /tmp/`hostname`-stig-results.xml \
--report /tmp/`hostname`-stig-report.html \
--cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20130910/85810938/attachment.html>


More information about the scap-security-guide mailing list