Shaw, Ray V CTR USARMY ARL (US) at
Tue May 13 12:20:45 UTC 2014

Classification: UNCLASSIFIED
Caveats: NONE

Unfortunately, I'm not aware of a way to do that.  You just get to select your 
XCCDF and the stream you want, and SCC kind of does its thing (or doesn't, in 
this case); the other files aren't specified explicitly as they are with 
OpenSCAP.  It just has them all and decides what to do with them.  I tried 
moving the cpe-oval file out of /opt/scc/Resources/Content, but then it just 
complained, used its generic CPE dictionary, and failed anyway.

I also tried loading ssg-rhel6-oval.xml as OVAL content, and running a scan 
that way, but that comes up with:

	[ERROR] Could not find the external variables file for "ssg-rhel6-oval".

And yes, definitely running RHEL :p  I've tried it on a few different systems, 
both Workstation and Server.

Ray Shaw (Contractor, STG)
Army Research Laboratory
CIO, Unix Support

> -----Original Message-----
> From: scap-security-guide-bounces at [mailto:scap-
> security-guide-bounces at] On Behalf Of Shawn Wells
> Sent: Monday, May 12, 2014 3:56 PM
> To: scap-security-guide at
> On 5/12/14, 3:14 PM, Shaw, Ray V CTR USARMY ARL (US) wrote:
> > HOSTNAME.EXAMPLE.COM: Loading ssg-rhel6-cpe-oval.xml
> > HOSTNAME.EXAMPLE.COM: OVAL Schema Version: 5.10 [ERROR] Invalid
> > content.  No OVAL object value found for package 'NAME'.
> Actually, this may be the issue:  Can you try to load ssg-rhel6-
> oval.xml (vs *cpe-oval.xml)?
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at

Classification: UNCLASSIFIED
Caveats: NONE

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5621 bytes
Desc: not available
URL: <>

More information about the scap-security-guide mailing list