<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1" bgcolor="#FFFFFF">
<div style="direction: ltr;font-family: Arial;color: #000000;font-size: 10pt;">Has this always been the case that the CPE/Dictionary is needed for oscap execution? I ask because if this is a new feature, I will ping the SecState list about when they will be
including the Dictionary as an argument to their program. Currently, secstate imports only an xccdf and will not work with the SSG v0.1-10....trying to resolve why this is.<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px"><font style="font-family:Arial" size="1"><font size="2"><span style="font-weight:bold"><br>
Logan Rodrian</span></font></font><font size="1"><span style="font-family:Arial; color:rgb(128,128,128)"></span><br>
</font></div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF297631"><font color="#000000" face="Tahoma" size="2"><b>From:</b> scap-security-guide-bounces@lists.fedorahosted.org [scap-security-guide-bounces@lists.fedorahosted.org] on behalf of Shawn Wells [shawn@redhat.com]<br>
<b>Sent:</b> Thursday, March 07, 2013 11:05<br>
<b>To:</b> scap-security-guide@lists.fedorahosted.org<br>
<b>Subject:</b> EXT :Re: scap-security-guide 0.1-10 help<br>
</font><br>
</div>
<div></div>
<div>
<div class="moz-cite-prefix">On 3/7/13 8:51 AM, Rodrian, Logan P (IS) wrote:<br>
</div>
<blockquote type="cite">It appears that the full command is needed. The scan won't run without the cpe/dictionary reference. The minimal command needed is as follows:<br>
<pre class="wiki"><font face="Courier New">oscap xccdf eval --profile <profile> \
--cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml</font></pre>
<div>
<div style="font-family:Tahoma; font-size:13px"><font style="font-family:Arial" size="1"><font size="2"><span style="font-weight:bold"><br>
</span></font></font></div>
</div>
</blockquote>
Ah, yes. The --cpe is *very* much needed as it provides some platform checks. The others (--report, etc) are optional.<br>
</div>
</div>
</div>
</body>
</html>