<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 9/26/13 1:16 PM, Kordell, Luke T
wrote:<br>
</div>
<blockquote
cite="mid:EBDE6A904AEF60448F36706839FFB5250B81FDC2@HVXDSP21.us.lmco.com"
type="cite">
<pre wrap="">Hello,.
I recently downloaded the SCAP source code and noticed there were some additional profiles listed in the profiles folder. How can I run a scan against these profiles? For instance wen trying to run a scan against the usgcb-rhel6-server.xml (after successfully using oscap xccdf validate) I get an "unknown document type" error. I think this is because I'm using the stig profile and the ssg cpe dictionary. If so how can I add a usgcb profile and cpe dictionary to successfully scan against this profile?
Thank you for the help. </pre>
</blockquote>
Good question!<br>
<br>
There are a few profiles in the RHEL6/input/profiles/ directory
which are still being completed, for example the FISMA, and a few
which likely should be deleted (e.g. desktop).<br>
<br>
To list out which profiles are compiled in:<br>
<blockquote type="cite">$ grep "<Profile"
output/ssg-rhel6-xccdf.xml <br>
<Profile id="test"><br>
<Profile id="CS2"><br>
<Profile id="common"><br>
<Profile id="desktop"><br>
<Profile id="server"><br>
<Profile id="ftp"><br>
<Profile id="stig-rhel6-server"></blockquote>
<br>
<br>
Profile definitions from RHEL6/input/profiles/ are merged into the
build process through the RHEL6/input/guide.xslt file:<br>
<a class="moz-txt-link-freetext" href="https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/guide.xslt">https://git.fedorahosted.org/cgit/scap-security-guide.git/tree/RHEL6/input/guide.xslt</a><br>
<br>
Since you're cloning the source (which is great!), I'll wager you're
comfortable editing things. If you'd like to check out the (in
progress) USGCB, add a line where you see the other apply-templates:<br>
<meta charset="utf-8">
<blockquote type="cite">
<meta charset="utf-8">
<pre style="margin: 0px; padding: 0px; color: rgb(0, 0, 0); font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 19px; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255);"><code style="background-color: rgba(0, 0, 0, 0.0980392); padding: 1px; background-position: initial initial; background-repeat: initial initial;"><xsl:apply-templates select="document('profiles/</code><code style="background-color: rgba(0, 0, 0, 0.0980392); padding: 1px; background-position: initial initial; background-repeat: initial initial;">usgcb-rhel6-server.xml')" /></code></pre>
</blockquote>
<br>
From there, re-run 'make content' in the RHEL6 directory and you'll
see an updated XCCDF in the output/ directory<br>
<br>
</body>
</html>