Shawn Wells shawn at
Tue May 13 20:15:13 UTC 2014

On 5/13/14, 8:20 AM, Shaw, Ray V CTR USARMY ARL (US) wrote:
> Classification: UNCLASSIFIED
> Caveats: NONE
> Unfortunately, I'm not aware of a way to do that.  You just get to select your
> XCCDF and the stream you want, and SCC kind of does its thing (or doesn't, in
> this case); the other files aren't specified explicitly as they are with
> OpenSCAP.  It just has them all and decides what to do with them.  I tried
> moving the cpe-oval file out of /opt/scc/Resources/Content, but then it just
> complained, used its generic CPE dictionary, and failed anyway.
> I also tried loading ssg-rhel6-oval.xml as OVAL content, and running a scan
> that way, but that comes up with:
> 	[ERROR] Could not find the external variables file for "ssg-rhel6-oval".
> And yes, definitely running RHEL :p  I've tried it on a few different systems,
> both Workstation and Server.

Strange. The SCC guys and I traded EMails last night, they're sending 
over the latest SCC build. The SSG community has a good relationship 
with that team, many even beta test their releases, making this odd. 
Will ping the list once I've the latest version downloaded (hopefully 

More information about the scap-security-guide mailing list