Anyone using rhel6 ssg for centos6?
Maura Dailey
maura at eclipse.ncsc.mil
Tue Jun 17 22:01:01 UTC 2014
Every single check is hard coded to look for the platform Red Hat
Enterprise Linux 6 (and in some cases now, Fedora and RHEL 7 as well).
You need a different identifier for CentOS. A glance at the CPE
dictionary at cpe.mitre.org suggests that the cpe value is
"cpe:/o:centos:centos:6" which has the human readable name CentOS-6.
Navigate to scap-security-guide/RHEL/6/input/checks and open a check.
Near the top, you'll see an XML section, affected. The <platform> tag is
key. Note that the <platform> tag inside is set to Red Hat Enterprise
Linux 6. That's why you get not applicable when you run the commands as is.
- Maura Dailey
On 06/17/2014 05:01 PM, Pettorino, Jeffrey D CTR USAF USAFA USAFA/DFAN
wrote:
> I have been trying to get oscap working on my CentOS6.5 network core,
> without luck.
>
> Everything comes back with "Result notapplicable".
>
> I am pretty new to SCAP and XCCDF, but am a long-time user of Nessus and
> Security Center (prior to ACAS program by DISA).
>
> Does anyone have suggestions where I can find some in depth guidance to
> adjust the rhel6 configs to CentOS?
>
> --
> Jeff
>
> v/r,
> Jeffrey D. Pettorino, GCIH, CISSP
> Systems Engineer
> High Performance Computing Research Center
> United States Air Force Academy
> Jeffrey.Pettorino.ctr at USAFA.edu
> 719/333-9391
> ----
> The use of the Unix philosophy just for UNIX was a great waste.
> Fortunately, Linux came along.
> - Bellevue Linux User Group member, 2005
>
>
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140617/448a8e21/attachment.html>
More information about the scap-security-guide
mailing list