Using OpenSCAP with CVE feeds for daily scanning

Greg Elin gregelin at gitmachines.com
Sun Mar 22 12:40:50 UTC 2015


​To date, I've used OpenSCAP to check the configuration of Unix operating
systems against government baselines.

But I assume OpenSCAP can consume any SCAP content including daily CVE
feeds? I have not tried that yet. And superficial searching did not reveal
any obvious documentation.

Does anyone know of a good example that would get a person started with
using OpenSCAP to consume CVE feeds? Any recommendations of freely
available feeds?

Thanks!

Greg Elin​
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20150322/d41c2ec0/attachment-0001.html>


More information about the scap-security-guide mailing list