SCAP FAQ Ideas?

Tim Moor tmoor at redhat.com
Wed Mar 25 20:10:25 UTC 2015


Not sure these are FAQ's, more HOWTO's but I'll take a stab at it.

How do I install SCAP
How do I use SCAP to remediate conditions
How do I edit or create my own SCAP Policy
Where can I find other SCAP profiles? [different public sources of xccdf 
scap profiles]
Is there a way to detect exposure to a cve [CVE-2014-7169]?
What tooling is available for scap [SCAP Workbench, ..., ...]?

On 26/03/15 04:04, Shawn Wells wrote:
> There are still many questions around using SCAP, such as the SCAP for
> CVE scanning thread a few days ago.
>
> To begin documenting FAQs -- both for the OpenSCAP/SSG pages, and formal
> Red Hat documentation -- I've started to document common questions here:
>
> https://github.com/OpenSCAP/scap-security-guide/wiki/What-should-go-into-an-FAQ%3F
>
>
> What other topics/questions should be covered? Feel free to edit the
> wiki directly or reply to the list! This feedback will be driven into
> our wikis/manuals, and formal docs off redhat.com.
>
> Don't limit to use SSG.... broader questions on how to store SCAP data,
> using OpenSCAP, how policy is developed all make sense!


More information about the scap-security-guide mailing list