<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><DIV style="RIGHT: auto" id=yiv7107398574>
<DIV style="RIGHT: auto">
<DIV style="BACKGROUND-COLOR: #fff; FONT-FAMILY: times new roman, new york, times, serif; COLOR: #000; FONT-SIZE: 12pt"><SPAN style="RIGHT: auto" id=yiv7107398574yui_3_7_2_7_1388679020490_49 lang=EN>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_51 align=left>While running SCC 3.1.1.1 against the SSG 0.1-14-14 content, with either the stig-rhel6-server or usgcb-rhel6-server profile selected from the SCAP stream, and rpm_verify_permissions = false, there appears to be variables referenced in the OVAL file but are not declared in the XCCDF and the value is being used in XCCDF without being declared.</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_117 align=left>&nbsp;</DIV>
<DIV style="RIGHT: auto" dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_122 align=left>SCC errorlog snippets:<VAR id=yui-ie-cursor></VAR></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_127 align=left>[ERROR] Could not find external variable with id 'oval:ssg:var:2224'.</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_132 align=left>[ERROR] Could not find external variable with id 'oval:ssg:var:2234'.</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_139 align=left>[ERROR] Could not find external variable with id 'oval:ssg:var:2237'.</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_144 align=left>&nbsp;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_149 align=left>OVAL/XCCDF snippets:</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_152 align=left>./Content/ssg-rhel6-oval.xml- &lt;/ind:textfilecontent54_object&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:partition_object id="oval:ssg:obj:1436" version="1"&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml: &lt;linux:mount_point var_ref="oval:ssg:var:2224"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:partition_object&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_155 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:rpminfo_object id="oval:ssg:obj:1440" version="1"&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:name&gt;vsftpd&lt;/linux:name&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:rpminfo_object&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/unix:runlevel_state&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_158 align=left>./Content/ssg-rhel6-oval.xml- &lt;ind:textfilecontent54_state id="oval:ssg:ste:1439" version="1"&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml: &lt;ind:subexpression datatype="string" var_ref="oval:ssg:var:2224"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/ind:textfilecontent54_state&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_161 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:partition_state id="oval:ssg:ste:1437" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_176 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:mount_options datatype="string" entity_check="at least one" operation="equals"&gt;noexec&lt;/linux:mount_options&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:partition_state&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;value&gt;/usr/sbin/usernetctl&lt;/value&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_164 align=left>./Content/ssg-rhel6-oval.xml- &lt;/constant_variable&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml: &lt;external_variable comment="removable partition" datatype="string" id="oval:ssg:var:2224" version="1"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="number of failed login attempts allowed" datatype="int" id="oval:ssg:var:2244" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_201 align=left>./Content/ssg-rhel6-oval.xml- L25:L29</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_167 align=left>&nbsp;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_212 align=left>$ /bin/grep "2224" /opt/scc/Resources/Content/ssg-rhel6-xccdf.xml</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_190 align=left>$&lt;null&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr align=left> </DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/ind:textfilecontent54_object&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_170 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:partition_object id="oval:ssg:obj:1713" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_187 align=left>./Content/ssg-rhel6-oval.xml: &lt;linux:mount_point var_ref="oval:ssg:var:2234"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:partition_object&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;unix:file_object comment="/etc/passwd" id="oval:ssg:obj:1717" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_173 align=left>./Content/ssg-rhel6-oval.xml- &lt;unix:path&gt;/etc&lt;/unix:path&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_184 align=left>./Content/ssg-rhel6-oval.xml- &lt;unix:filename&gt;passwd&lt;/unix:filename&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_181 align=left>./Content/ssg-rhel6-oval.xml- &lt;/unix:runlevel_state&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_272 align=left>./Content/ssg-rhel6-oval.xml- &lt;ind:textfilecontent54_state id="oval:ssg:ste:1716" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_57 align=left>./Content/ssg-rhel6-oval.xml: &lt;ind:subexpression datatype="string" var_ref="oval:ssg:var:2234"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_68 align=left>./Content/ssg-rhel6-oval.xml- &lt;/ind:textfilecontent54_state&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:partition_state id="oval:ssg:ste:1714" version="1"&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:mount_options datatype="string" entity_check="at least one" operation="equals"&gt;nodev&lt;/linux:mount_options&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:partition_state&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_227 align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="External variable: name of selinux policy in /etc/selinux/config" datatype="string" id="oval:ssg:var:2257" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_258 align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="audit max_log_file settting" datatype="int" id="oval:ssg:var:2258" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_253 align=left>./Content/ssg-rhel6-oval.xml: &lt;external_variable comment="removable partition" datatype="string" id="oval:ssg:var:2234" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_230 align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="External variable for pam_cracklib dcredit" datatype="int" id="oval:ssg:var:2259" version="1"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="number of failed login attempts allowed" datatype="int" id="oval:ssg:var:2260" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_267 align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="umask for user shell" datatype="string" id="oval:ssg:var:2261" version="1"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="External variable for pam_cracklib minclass" datatype="int" id="oval:ssg:var:2262" version="1"/&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_233 align=left>&nbsp;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_295 align=left>/bin/grep "2234" /opt/scc/Resources/Content/ssg-rhel6-xccdf.xml</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_240 align=left>$ &lt;null&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_282 align=left>&nbsp;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_329 align=left>./Content/ssg-rhel6-oval.xml- &lt;/ind:textfilecontent54_object&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_277 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:partition_object id="oval:ssg:obj:2095" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_314 align=left>./Content/ssg-rhel6-oval.xml: &lt;linux:mount_point var_ref="oval:ssg:var:2237"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_54 align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:partition_object&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_373 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:rpminfo_object id="oval:ssg:obj:2099" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_47 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:name&gt;nfs-utils&lt;/linux:name&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_379 align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:rpminfo_object&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/unix:runlevel_state&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;ind:textfilecontent54_state id="oval:ssg:ste:2098" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_336 align=left>./Content/ssg-rhel6-oval.xml: &lt;ind:subexpression datatype="string" var_ref="oval:ssg:var:2237"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/ind:textfilecontent54_state&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:partition_state id="oval:ssg:ste:2096" version="1"&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_339 align=left>./Content/ssg-rhel6-oval.xml- &lt;linux:mount_options datatype="string" entity_check="at least one" operation="equals"&gt;nosuid&lt;/linux:mount_options&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;/linux:partition_state&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="number of passwords that should be remembered" datatype="int" id="oval:ssg:var:2267" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_399 align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="audit max_log_file_action setting" datatype="string" id="oval:ssg:var:2268" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_342 align=left>./Content/ssg-rhel6-oval.xml: &lt;external_variable comment="removable partition" datatype="string" id="oval:ssg:var:2237" version="1"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="External variable for pam_cracklib ucredit" datatype="int" id="oval:ssg:var:2269" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_396 align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="audit num_logs settting" datatype="int" id="oval:ssg:var:2270" version="1"/&gt;</DIV>
<DIV dir=ltr align=left>./Content/ssg-rhel6-oval.xml- &lt;external_variable comment="external variable for daemon umask" datatype="string" id="oval:ssg:var:2271" version="1"/&gt;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_345 align=left>./Content/ssg-rhel6-oval.xml- &lt;/variables&gt;</DIV>
<DIV dir=ltr align=left></DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_360 align=left>&nbsp;</DIV>
<DIV dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_376 align=left>$ /bin/grep "2237" /opt/scc/Resources/Content/ssg-rhel6-xccdf.xml</DIV>
<DIV style="RIGHT: auto" dir=ltr id=yiv7107398574yui_3_7_2_7_1388679020490_50 align=left>$ &lt;null&gt;</DIV></SPAN></DIV></DIV></DIV></div></body></html>