"notapplicable" in scap results?
mpreisle at redhat.com
Fri May 23 11:17:49 UTC 2014
----- Original Message -----
> From: "Martin Preisler" <mpreisle at redhat.com>
> To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> Sent: Friday, May 23, 2014 1:07:06 PM
> Subject: Re: "notapplicable" in scap results?
> ----- Original Message -----
> > From: "Trey Henefield" <trey.henefield at ultra-ats.com>
> > To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> > Sent: Thursday, May 22, 2014 11:12:25 PM
> > Subject: RE: "notapplicable" in scap results?
> > You need a modified cpe-oval. Simply change redhat-release to
> > centos-release.
> > See the attached example, as pulled from the RHEL5 STIG.
> I will just reiterate that we are happy to accept patches! This would involve
> adding CentOS 5 and 6 to CPE and CPE OVAL files that come with openscap. See
> This would be a proper fix, much cleaner than the proposed hack.
Patches no longer needed. This was implemented a few moments ago, see
More information about the scap-security-guide