"notapplicable" in scap results?

Trey Henefield trey.henefield at ultra-ats.com
Thu May 22 21:12:25 UTC 2014


You need a modified cpe-oval. Simply change redhat-release to centos-release.

See the attached example, as pulled from the RHEL5 STIG.

Best regards,

Trey Henefield, CISSP
Senior IAVA Engineer

Ultra Electronics
Advanced Tactical Systems, Inc.
4101 Smith School Road
Building IV, Suite 100
Austin, TX 78744 USA

Trey.Henefield at ultra-ats.com
Tel: +1 512 327 6795 ext. 647
Fax: +1 512 327 8043
Mobile: +1 512 541 6450

www.ultra-ats.com

From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Greg Elin
Sent: Thursday, May 22, 2014 3:47 PM
To: scap-security-guide at lists.fedorahosted.org
Subject: "notapplicable" in scap results?

We ran a couple different RHEL profiles on CentOS 6.4 virtual machine and received "not applicable" for all results.

That's the first time I've seen nonapplicable and I'm trying understand what it means. (I know it means not applicable, but I want to make sure we don't have a configuration issue set incorrectly.)

Here's what we ran:

oscap xccdf eval --profile DOD_baseline_1.0.0.1 --cpe dcb-rhel5_cpe-dictionary.xml --results result.xml --oval-results dcb-rhel5_xccdf.xml

Sample below.

---------- Forwarded message ----------
From: Rodney Cobb <rocobb at gitmachines.com<mailto:rocobb at gitmachines.com>>
Date: Thu, May 22, 2014 at 4:10 PM
Subject: Scap Results
To: Greg Elin <gregelin at gitmachines.com<mailto:gregelin at gitmachines.com>>

Greg,

Here is snippet of the results:

Title   Disable Samba if Possible

Rule    dcb-rhel5-3.18.1.a

Ident   CCE-4551-8

Result  notapplicable



Title   Require Client SMB Packet Signing, if using smbclient

Rule    dcb-rhel5-3.18.2.10.a

Ident   CCE-14075-6

Result  notapplicable



Title   Require Client SMB Packet Signing, if using mount.cifs

Rule    dcb-rhel5-3.18.2.11.a

Ident   CCE-15029-2

Result  notapplicable



Title   Disable Squid if Possible

Rule    dcb-rhel5-3.19.1.a

Ident   CCE-4556-7

Result  notapplicable



Title   Uninstall Squid if Possible

Rule    dcb-rhel5-3.19.1.b

Ident   CCE-4076-6

Result  notapplicable



Here is the command given in terminal that produced previous results:

oscap xccdf eval --profile DOD_baseline_1.0.0.1 --cpe dcb-rhel5_cpe-dictionary.xml --results result.xml --oval-results dcb-rhel5_xccdf.xml



Rodney

Disclaimer
The information contained in this communication from trey.henefield at ultra-ats.com sent at 2014-05-22 17:12:33 is confidential and may be legally privileged.
It is intended solely for use by scap-security-guide at lists.fedorahosted.org and others authorized to receive it. If you are not scap-security-guide at lists.fedorahosted.org you are hereby notified that
any disclosure, copying, distribution or taking action in reliance of the contents of this information is strictly prohibited and may be unlawful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140522/e545ced2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: U_RedHat_5-V1R7_STIG_Benchmark-cpe-oval.xml
Type: application/xml
Size: 4039 bytes
Desc: U_RedHat_5-V1R7_STIG_Benchmark-cpe-oval.xml
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140522/e545ced2/attachment-0001.wsdl>


More information about the scap-security-guide mailing list