SCC (UNCLASSIFIED)

Shawn Wells shawn at redhat.com
Tue May 13 20:15:13 UTC 2014


On 5/13/14, 8:20 AM, Shaw, Ray V CTR USARMY ARL (US) wrote:
> Classification: UNCLASSIFIED
> Caveats: NONE
>
> Unfortunately, I'm not aware of a way to do that.  You just get to select your
> XCCDF and the stream you want, and SCC kind of does its thing (or doesn't, in
> this case); the other files aren't specified explicitly as they are with
> OpenSCAP.  It just has them all and decides what to do with them.  I tried
> moving the cpe-oval file out of /opt/scc/Resources/Content, but then it just
> complained, used its generic CPE dictionary, and failed anyway.
>
> I also tried loading ssg-rhel6-oval.xml as OVAL content, and running a scan
> that way, but that comes up with:
>
> 	[ERROR] Could not find the external variables file for "ssg-rhel6-oval".
>
> And yes, definitely running RHEL :p  I've tried it on a few different systems,
> both Workstation and Server.

Strange. The SCC guys and I traded EMails last night, they're sending 
over the latest SCC build. The SSG community has a good relationship 
with that team, many even beta test their releases, making this odd. 
Will ping the list once I've the latest version downloaded (hopefully 
today).




More information about the scap-security-guide mailing list