<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body ocsi="0" fpstyle="1" style="word-wrap:break-word; color:rgb(0,0,0); font-size:14px; font-family:Calibri,sans-serif">
<div style="direction: ltr;font-family: Arial;color: #000000;font-size: 10pt;">It appears that the full command is needed.&nbsp; The scan won't run without the cpe/dictionary reference.&nbsp; The minimal command needed is as follows:<br>
<pre class="wiki"><font face="Courier New">oscap xccdf eval --profile &lt;profile&gt; \
--cpe /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml \
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml</font></pre>
<div>
<div style="font-family:Tahoma; font-size:13px"><font style="font-family:Arial" size="1"><font size="2"><span style="font-weight:bold"><br>
Logan Rodrian</span></font></font><font size="1"><span style="font-family:Arial; color:rgb(128,128,128)"></span><br>
</font></div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div style="direction: ltr;" id="divRpF354049"><font color="#000000" face="Tahoma" size="2"><b>From:</b> scap-security-guide-bounces@lists.fedorahosted.org [scap-security-guide-bounces@lists.fedorahosted.org] on behalf of Brian Peake [PEAKE@HIPKLLC.COM]<br>
<b>Sent:</b> Thursday, March 07, 2013 06:47<br>
<b>To:</b> scap-security-guide@lists.fedorahosted.org<br>
<b>Subject:</b> EXT :Re: scap-security-guide 0.1-10 help<br>
</font><br>
</div>
<div></div>
<div>
<div>
<div>
<div>IGNORE my last. Just checked, that profile is there…</div>
<div><br>
</div>
<div>
<div>
<div><span class="Apple-style-span" style="font-size:12px; font-family:Helvetica,Verdana,Arial">Very Respectfully,</span></div>
<font size="1"><font face="Helvetica,Verdana,Arial"><span style="font-size:9pt"><br>
<font color="#0A12FF"><i>Brian Peake<br>
HiPK, LLC<br>
</i></font></span></font></font></div>
</div>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; border-bottom:medium none; border-left:medium none; padding-bottom:0in; padding-left:0in; padding-right:0in; border-top:#b5c4df 1pt solid; border-right:medium none; padding-top:3pt">
<span style="font-weight:bold">From: </span>Brian Peake &lt;<a href="mailto:peake@hipkllc.com" target="_blank">peake@hipkllc.com</a>&gt;<br>
<span style="font-weight:bold">Reply-To: </span>&lt;<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.fedorahosted.org</a>&gt;<br>
<span style="font-weight:bold">Date: </span>Thu, 07 Mar 2013 08:41:59 -0500<br>
<span style="font-weight:bold">To: </span>&lt;<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.fedorahosted.org</a>&gt;<br>
<span style="font-weight:bold">Subject: </span>Re: scap-security-guide 0.1-10 help<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap:break-word; color:rgb(0,0,0); font-size:14px; font-family:Calibri,sans-serif">
<div>
<div>
<div>Check the profile name: I found it appears to have changed and is no longer stig-rhel6-server</div>
<div><br>
</div>
<div>I can't remember what it is now (have to scan the XCDDF), but the SSG site user documentation had not been updated when I attempted my runs.</div>
<div><br>
</div>
<div>
<div>
<div><span class="Apple-style-span" style="font-size:12px; font-family:Helvetica,Verdana,Arial">Very Respectfully,</span></div>
<font size="1"><font face="Helvetica,Verdana,Arial"><span style="font-size:9pt"><br>
<font color="#0A12FF"><i>Brian Peake<br>
HiPK, LLC<br>
<br>
</i></font></span></font></font></div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; border-bottom:medium none; border-left:medium none; padding-bottom:0in; padding-left:0in; padding-right:0in; border-top:#b5c4df 1pt solid; border-right:medium none; padding-top:3pt">
<span style="font-weight:bold">From: </span>&quot;Rodrian, Logan P (IS)&quot; &lt;<a href="mailto:Logan.Rodrian@ngc.com" target="_blank">Logan.Rodrian@ngc.com</a>&gt;<br>
<span style="font-weight:bold">Reply-To: </span>&lt;<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.fedorahosted.org</a>&gt;<br>
<span style="font-weight:bold">Date: </span>Thu, 7 Mar 2013 13:31:27 &#43;0000<br>
<span style="font-weight:bold">To: </span>&quot;<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.fedorahosted.org</a>&quot; &lt;<a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">scap-security-guide@lists.fedorahosted.org</a>&gt;<br>
<span style="font-weight:bold">Subject: </span>RE: scap-security-guide 0.1-10 help<br>
</div>
<div><br>
</div>
<div dir="ltr"><style id="owaParaStyle" type="text/css">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
BODY {direction: ltr;font-family: Arial;color: #000000;font-size: 10pt;}P {margin-top:0;margin-bottom:0;}</style>
<div bgcolor="#FFFFFF">
<div style="direction:ltr; font-family:Arial; color:#000000; font-size:10pt">That is the URL where I found the command.&nbsp; I just happened to try the common profile in addition to the stig-rhel6-server profile.&nbsp; Both yield the same result showing &quot;notapplicable&quot;.<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px"><font style="font-family:Arial" size="1"><font size="2"><span style="font-weight:bold"><br>
Logan Rodrian</span></font><br>
</font><font size="1"><span style="font-family:Arial; color:rgb(128,128,128)"></span><br>
</font></div>
</div>
<div style="font-family:Times New Roman; color:#000000; font-size:16px">
<hr tabindex="-1">
<div id="divRpF969611" style="direction:ltr"><font color="#000000" face="Tahoma" size="2"><b>From:</b>
<a href="mailto:scap-security-guide-bounces@lists.fedorahosted.org" target="_blank">
scap-security-guide-bounces@lists.fedorahosted.org</a> [<a href="mailto:scap-security-guide-bounces@lists.fedorahosted.org" target="_blank">scap-security-guide-bounces@lists.fedorahosted.org</a>] on behalf of Shawn Wells [<a href="mailto:shawn@redhat.com" target="_blank">shawn@redhat.com</a>]<br>
<b>Sent:</b> Wednesday, March 06, 2013 19:53<br>
<b>To:</b> <a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">
scap-security-guide@lists.fedorahosted.org</a><br>
<b>Subject:</b> EXT :Re: scap-security-guide 0.1-10 help<br>
</font><br>
</div>
<div></div>
<div>
<div class="moz-cite-prefix">On 3/6/13 5:19 PM, Rodrian, Logan P (IS) wrote:<br>
</div>
<blockquote type="cite">
<ul>
<li><br>
</li></ul>
<p>I am attempting a secstate audit and would like to use the newly released scap-security-guide v0.1-10.&nbsp; I have tried simply applying the v0.1-10 rpm and importing that content into secstate.&nbsp; When running a profile (no matter which is selected), the report
 shows that none of the rules have been selected.&nbsp; Backing up a layer, I simply tried the instructions on the scap-security-guide webpage of running:
<br>
</p>
<pre class="wiki">oscap xccdf eval --profile common /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml</pre>
<div>...and then all output shows &quot;Result notapplicable&quot;.</div>
</blockquote>
I haven't used the secstate tool much recently, so I can't address that... but as for the oscap command above, where on the webpage did you find it? That's an outdated invocation and needs to be updated.<br>
<br>
Here's the current usage guide: <a class="moz-txt-link-freetext" href="https://fedorahosted.org/scap-security-guide/wiki/usageguide" target="_blank">
https://fedorahosted.org/scap-security-guide/wiki/usageguide</a><br>
</div>
</div>
</div>
</div>
</div>
_______________________________________________ scap-security-guide mailing list <a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">
scap-security-guide@lists.fedorahosted.org</a><a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a></span></div>
</div>
_______________________________________________ scap-security-guide mailing list <a href="mailto:scap-security-guide@lists.fedorahosted.org" target="_blank">
scap-security-guide@lists.fedorahosted.org</a> <a href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide" target="_blank">
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a> </span></div>
</div>
</div>
</body>
</html>