Fwd: oscap & jboss on Fedora

Ivan Saez Scheihing saezscheihing at gmail.com
Tue May 6 07:23:40 UTC 2014


Martin,

I've been struggling with the oscap syntax but I think I got it right. See
the attachment for the output of:

*oscap xccdf eval --profile eap5_full --results xccdf_out.xml --report
xccdf.html --oval-results eap5-xccdf.xml eap5-oval.xml*

regards,

Ivan

---------- Forwarded message ----------
From: Martin Preisler <mpreisle at redhat.com>
Date: Mon, May 5, 2014 at 3:53 PM
Subject: Re: oscap & jboss on Fedora
To: Ivan Saez Scheihing <saezscheihing at gmail.com>


----- Original Message -----
> From: "Ivan Saez Scheihing" <saezscheihing at gmail.com>
> To: "Martin Preisler" <mpreisle at redhat.com>
> Sent: Monday, May 5, 2014 2:04:04 PM
> Subject: Re: oscap & jboss on Fedora
>
> Martin,
>
> Xccdfexec is java tool which can be used to run the Jboss Eap5 scap
> benchmark. It can be downloaded from
> http://sourceforge.net/projects/xccdfexec/
> This tools is mentioned in the JBossEAP5_Guide.html.

This tool isn't related to openscap AFAIK. I can't find any mention of
openscap in the source code. If you are using it for evaluation you need to
reach xccdfexec upstream, we can't help you with their project.

>
> I've run the following command: oscap oval eval --results oval-results.xml
> eap5-oval.xml
> The output of this is attached.
>
> regards,
>
> Ivan

I can confirm that these are OVAL results. It would be better if you
provided: `oscap xccdf eval --results xccdf-results.xml --oval-results
eap5-oval.xml`

But there will do. Could you please send this to the public mailing list? I
prefer these sorts of discussions to be public so that more people can
chime in. 95 kB should not get held up in the moderation queue.

--
Martin Preisler
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140506/e4fe72b1/attachment-0002.html>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140506/e4fe72b1/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: xccdf_out.xml
Type: text/xml
Size: 453192 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140506/e4fe72b1/attachment-0002.xml>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: eap5-oval.xml.result.xml
Type: text/xml
Size: 105407 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140506/e4fe72b1/attachment-0003.xml>


More information about the scap-security-guide mailing list