"notapplicable" in scap results?

Martin Preisler mpreisle at redhat.com
Fri May 23 11:07:06 UTC 2014

----- Original Message -----
> From: "Trey Henefield" <trey.henefield at ultra-ats.com>
> To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> Sent: Thursday, May 22, 2014 11:12:25 PM
> Subject: RE: "notapplicable" in scap results?
> You need a modified cpe-oval. Simply change redhat-release to centos-release.
> See the attached example, as pulled from the RHEL5 STIG.

I will just reiterate that we are happy to accept patches! This would involve adding CentOS 5 and 6 to CPE and CPE OVAL files that come with openscap. See https://git.fedorahosted.org/cgit/openscap.git/tree/cpe

This would be a proper fix, much cleaner than the proposed hack.

Martin Preisler (from openscap upstream)

More information about the scap-security-guide mailing list