First time running openscap, getting notapplicable

Martin Preisler mpreisle at redhat.com
Sun Nov 16 15:48:08 UTC 2014


----- Original Message -----
> From: "Grant Schoep" <matobinder at gmail.com>
> To: "SCAP Security Guide" <scap-security-guide at lists.fedorahosted.org>
> Sent: Sunday, November 16, 2014 4:38:30 PM
> Subject: Re: First time running openscap, getting notapplicable
> 
> I did try running one of the xccdf file that it looks like you deliver
> builtin. Same issue,  I don't see the STDERR warning about ./oval.xml being
> skipped. But still get "notapplicable" Trying..
> 
> oscap xccdf eval --profile RHEL6-Default --results hey2.xml
> ./share/openscap/scap-rhel6-xccdf.xml
> 
> This was on my RHEL6 machine (note I am being "careful" to be using oscap
> from my 1.1.1 build, and not the one that comes in RPM from Redhat
> themselves.
> 
> my guess is that oscap is thinking I am running something else. Not
> matching cpe:/o:redhat:enterprise_linux:6  (or 5)
> 
> Without mucking with the code(which I can) just wondering if there is a way
> to print out what oscap thinks is the machine. Or, if you can point me to a
> good place to put a printf, I could rebuild it.

Try `oscap oval eval --results /tmp/x.xml /usr/share/openscap/cpe/openscap-cpe-oval.xml`.
And paste the x.xml file somewhere. It seems to me that you are getting
false for all of the OVAL definitions.

-- 
Martin Preisler


More information about the scap-security-guide mailing list