Anyone using rhel6 ssg for centos6?

Maura Dailey maura at eclipse.ncsc.mil
Tue Jun 17 22:01:01 UTC 2014


Every single check is hard coded to look for the platform Red Hat 
Enterprise Linux 6 (and in some cases now, Fedora and RHEL 7 as well). 
You need a different identifier for CentOS. A glance at the CPE 
dictionary at cpe.mitre.org suggests that the cpe value is 
"cpe:/o:centos:centos:6" which has the human readable name CentOS-6. 
Navigate to scap-security-guide/RHEL/6/input/checks and open a check. 
Near the top, you'll see an XML section, affected. The <platform> tag is 
key. Note that the <platform> tag inside is set to Red Hat Enterprise 
Linux 6. That's why you get not applicable when you run the commands as is.

- Maura Dailey

On 06/17/2014 05:01 PM, Pettorino, Jeffrey D CTR USAF USAFA USAFA/DFAN 
wrote:
> I have been trying to get oscap working on my CentOS6.5 network core,
> without luck.
>
> Everything comes back with "Result notapplicable".
>
> I am pretty new to SCAP and XCCDF, but am a long-time user of Nessus and
> Security Center (prior to ACAS program by DISA).
>
> Does anyone have suggestions where I can find some in depth guidance to
> adjust the rhel6 configs to CentOS?
>
> --
> Jeff
>
> v/r,
> Jeffrey D. Pettorino, GCIH, CISSP
> Systems Engineer
> High Performance Computing Research Center
> United States Air Force Academy
> Jeffrey.Pettorino.ctr at USAFA.edu
> 719/333-9391
> ----
> The use of the Unix philosophy just for UNIX was a great waste.
> Fortunately, Linux came along.
> - Bellevue Linux User Group member, 2005
>
>
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140617/448a8e21/attachment.html>


More information about the scap-security-guide mailing list