SCAP Platform Applicability

Simon Lukasik isimluk at fedoraproject.org
Fri Jan 9 10:20:07 UTC 2015


On 01/08/2015 09:04 PM, Lesley Kimmel wrote:
> I just downloaded the RHEL7 SCAP content and was 'playing' with it on a
> CentOS 6 system. I found that in order to make the checks run I needed
> to add 'cpe:/o:centos:centos:6' in a <platform> tag near the beginning
> of the XCCDF component. I found this, in part, from various posts on the
> interwebs. I'm really curious how this validation occurs and where the
> information comes from on the target OS. Can anyone give me insight to
> this issue?
>

If you really wish to understand the things, your best bet would be to 
read the actual standards.

For example XCCDF Standard document (NIST Interagency Report 7275) gives 
basic insight into CPE matching.

Best regards,

-- 
Simon Lukasik
Security Technologies, Red Hat, Inc.


More information about the scap-security-guide mailing list