Running a scan for a single rule in opens cap?

Simon Lukasik isimluk at
Sat May 24 15:55:44 UTC 2014

On 05/24/2014 05:45 PM, Greg Elin wrote:
> Is it possible from command line to run a single rule test with opens
> cap...and even better pipe the output?
> The only way I can figure to run a single test is to create a profile
> with a single rule.

Often times a single XCCDF Rule corresponds with a single OVAL 
definition. In such cases there is an easy way to evaluate single oval 

     oscap oval eval --id my:def:id --results debug-results.xml oval.xml

In other cases, i.e. when you still need the XCCDF part to debug, I am 
afraid there is no easy answer (XCCDF standard wise). What values would 
be bound to the variables? How would the TestResult on output look like?

The only thing I can advice you is to use tailoring file, if you wish to 
avoid editing your XCCDF document.

Best regards,

Simon Lukasik
Security Technologies, Red Hat, Inc.

More information about the scap-security-guide mailing list