"notapplicable" in scap results?
Trey Henefield
trey.henefield at ultra-ats.com
Thu May 22 21:12:25 UTC 2014
You need a modified cpe-oval. Simply change redhat-release to centos-release.
See the attached example, as pulled from the RHEL5 STIG.
Best regards,
Trey Henefield, CISSP
Senior IAVA Engineer
Ultra Electronics
Advanced Tactical Systems, Inc.
4101 Smith School Road
Building IV, Suite 100
Austin, TX 78744 USA
Trey.Henefield at ultra-ats.com
Tel: +1 512 327 6795 ext. 647
Fax: +1 512 327 8043
Mobile: +1 512 541 6450
www.ultra-ats.com
From: scap-security-guide-bounces at lists.fedorahosted.org [mailto:scap-security-guide-bounces at lists.fedorahosted.org] On Behalf Of Greg Elin
Sent: Thursday, May 22, 2014 3:47 PM
To: scap-security-guide at lists.fedorahosted.org
Subject: "notapplicable" in scap results?
We ran a couple different RHEL profiles on CentOS 6.4 virtual machine and received "not applicable" for all results.
That's the first time I've seen nonapplicable and I'm trying understand what it means. (I know it means not applicable, but I want to make sure we don't have a configuration issue set incorrectly.)
Here's what we ran:
oscap xccdf eval --profile DOD_baseline_1.0.0.1 --cpe dcb-rhel5_cpe-dictionary.xml --results result.xml --oval-results dcb-rhel5_xccdf.xml
Sample below.
---------- Forwarded message ----------
From: Rodney Cobb <rocobb at gitmachines.com<mailto:rocobb at gitmachines.com>>
Date: Thu, May 22, 2014 at 4:10 PM
Subject: Scap Results
To: Greg Elin <gregelin at gitmachines.com<mailto:gregelin at gitmachines.com>>
Greg,
Here is snippet of the results:
Title Disable Samba if Possible
Rule dcb-rhel5-3.18.1.a
Ident CCE-4551-8
Result notapplicable
Title Require Client SMB Packet Signing, if using smbclient
Rule dcb-rhel5-3.18.2.10.a
Ident CCE-14075-6
Result notapplicable
Title Require Client SMB Packet Signing, if using mount.cifs
Rule dcb-rhel5-3.18.2.11.a
Ident CCE-15029-2
Result notapplicable
Title Disable Squid if Possible
Rule dcb-rhel5-3.19.1.a
Ident CCE-4556-7
Result notapplicable
Title Uninstall Squid if Possible
Rule dcb-rhel5-3.19.1.b
Ident CCE-4076-6
Result notapplicable
Here is the command given in terminal that produced previous results:
oscap xccdf eval --profile DOD_baseline_1.0.0.1 --cpe dcb-rhel5_cpe-dictionary.xml --results result.xml --oval-results dcb-rhel5_xccdf.xml
Rodney
Disclaimer
The information contained in this communication from trey.henefield at ultra-ats.com sent at 2014-05-22 17:12:33 is confidential and may be legally privileged.
It is intended solely for use by scap-security-guide at lists.fedorahosted.org and others authorized to receive it. If you are not scap-security-guide at lists.fedorahosted.org you are hereby notified that
any disclosure, copying, distribution or taking action in reliance of the contents of this information is strictly prohibited and may be unlawful.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140522/e545ced2/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: U_RedHat_5-V1R7_STIG_Benchmark-cpe-oval.xml
Type: application/xml
Size: 4039 bytes
Desc: U_RedHat_5-V1R7_STIG_Benchmark-cpe-oval.xml
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20140522/e545ced2/attachment-0001.wsdl>
More information about the scap-security-guide
mailing list