"notapplicable" in scap results?

Martin Preisler mpreisle at redhat.com
Fri May 23 11:17:49 UTC 2014


----- Original Message -----
> From: "Martin Preisler" <mpreisle at redhat.com>
> To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> Sent: Friday, May 23, 2014 1:07:06 PM
> Subject: Re: "notapplicable" in scap results?
> 
> ----- Original Message -----
> > From: "Trey Henefield" <trey.henefield at ultra-ats.com>
> > To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> > Sent: Thursday, May 22, 2014 11:12:25 PM
> > Subject: RE: "notapplicable" in scap results?
> > 
> > You need a modified cpe-oval. Simply change redhat-release to
> > centos-release.
> > 
> > See the attached example, as pulled from the RHEL5 STIG.
> 
> Hi,
> I will just reiterate that we are happy to accept patches! This would involve
> adding CentOS 5 and 6 to CPE and CPE OVAL files that come with openscap. See
> https://git.fedorahosted.org/cgit/openscap.git/tree/cpe
> 
> This would be a proper fix, much cleaner than the proposed hack.

Patches no longer needed. This was implemented a few moments ago, see
https://git.fedorahosted.org/cgit/openscap.git/commit/?id=e09f29496081a0525cda0b18299bccb9803baf76

-- 
Martin Preisler


More information about the scap-security-guide mailing list