<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi Gabe,<br>
    <br>
    Thank you for your reply. I'm trying to use the 0.1.23 release, but
    having issues building the content. The error I get is:<br>
    <br>
    <tt>Skipping datastream composition, use OpenSCAP 1.2.2 or later!</tt><tt><br>
    </tt><tt>mkdir -p dist/content</tt><tt><br>
    </tt><tt>cp output/ssg-fedora-xccdf.xml dist/content</tt><tt><br>
    </tt><tt>cp output/ssg-fedora-oval.xml dist/content</tt><tt><br>
    </tt><tt>cp output/ssg-fedora-ds.xml dist/content</tt><tt><br>
    </tt><tt>cp: cannot stat `output/ssg-fedora-ds.xml': No such file or
      directory</tt><tt><br>
    </tt><tt>make[1]: *** [dist] Error 1</tt><tt><br>
    </tt><tt>make[1]: Leaving directory
      `/root/scap-security-guide-0.1.23/Fedora'</tt><tt><br>
    </tt><tt>make: *** [fedora] Error 2</tt><br>
    <br>
    I suspect the missing "ssg-fedora-ds.xml" has something to do with
    the "Skipping datastream composition" message above?<br>
    <br>
    I'm on CentOS6, and this is the version I got from the yum repos:<br>
    <br>
    <tt>[root@openscap-testing scap-security-guide-0.1.23]# rpm -qa
      openscap\*</tt><tt><br>
    </tt><tt>openscap-1.0.8-1.0.1.el6.centos.1.x86_64</tt><tt><br>
    </tt><tt>openscap-content-1.0.8-1.0.1.el6.centos.1.noarch</tt><tt><br>
    </tt><tt>openscap-utils-1.0.8-1.0.1.el6.centos.1.x86_64</tt><br>
    <br>
    So, is this a matter of not being compatible with the version of
    openscap I'm using? Or, is the make process suppose to handle older
    versions of openscap more gracefully?<br>
    <br>
    Thanks,<br>
    -Bond<br>
    <br>
    <br>
    <div class="moz-cite-prefix">On 06/30/2015 03:54 PM, Gabe Alford
      wrote:<br>
    </div>
    <blockquote
cite="mid:CAGLxfGwxHwPP2NjB=wVBL2C6+o3Qo9-0RQB+JRg2nWV6_bxqXw@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>
          <div>
            <div>
              <div>
                <div>
                  <div>Hey Bond,<br>
                    <br>
                  </div>
                  As of SCAP Security Guide release 0.1.23, CentOS
                  content is now available (any older version will
                  require tweaking). See the announcement here: <a
                    moz-do-not-send="true"
href="https://lists.fedorahosted.org/pipermail/scap-security-guide/2015-June/006462.html"
                    target="_blank">https://lists.fedorahosted.org/pipermail/scap-security-guide/2015-June/006462.html</a><br>
                  <br>
                </div>
                You can download and build the SSG content from <a
                  moz-do-not-send="true"
                  href="https://github.com/OpenSCAP/scap-security-guide"
                  target="_blank">https://github.com/OpenSCAP/scap-security-guide</a><br>
                <br>
              </div>
              When you run the XCCDF, you have to specify the CentOS
              XCCDF like below:<br>
              <br>
              # oscap xccdf eval --profile stig-rhel6-server-upstream \<br>
                   --results /tmp/`hostname`-ssg-results.xml \<br>
                   --report /tmp/`hostname`-ssg-results.html \<br>
                   --cpe
              /usr/share/xml/scap/ssg/content/ssg-centos6-cpe-dictionary.xml
              \<br>
                   /usr/share/xml/scap/ssg/content/ssg-centos6-xccdf.xml<br>
              <br>
            </div>
            Please note that I believe that
            ssg-centos6-cpe-dictionary.xml is not being built with SSG.
            OpenSCAP is here: <a moz-do-not-send="true"
              href="https://github.com/openscap/openscap"
              target="_blank">https://github.com/openscap/openscap</a>
            and the announcement here: So I believe all that needs to be
            done is:<br>
            <br>
            # oscap xccdf eval --profile stig-rhel6-server-upstream \<br>
                 --results /tmp/`hostname`-ssg-results.xml \<br>
                 --report /tmp/`hostname`-ssg-results.html \<br>
                 /usr/share/xml/scap/ssg/content/ssg-centos6-xccdf.xml<br>
            <br>
          </div>
          Thanks, <br>
          <br>
        </div>
        Gabe<br>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Tue, Jun 30, 2015 at 3:56 PM, Bond
          Masuda <span dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:bond.masuda@hexadiam.com" target="_blank">bond.masuda@hexadiam.com</a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
            <br>
            Is there a guide on how to use the RHEL SCAP content for
            CentOS? When I<br>
            try to use it, I get a lot of "Result: notapplicable". What
            needs to be<br>
            done?<br>
            <br>
            I'm using it with OpenSCAP per the manual:<br>
            <br>
            # oscap xccdf eval --profile stig-rhel6-server-upstream \<br>
                 --results /tmp/`hostname`-ssg-results.xml \<br>
                 --report /tmp/`hostname`-ssg-results.html \<br>
                 --cpe
            /usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml
            \<br>
                 /usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml<br>
            <br>
            TIA,<br>
            -Bond<br>
            <span class="HOEnZb"><font color="#888888">--<br>
                SCAP Security Guide mailing list<br>
                <a moz-do-not-send="true"
                  href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
                <a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide"
                  rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
                <a moz-do-not-send="true"
                  href="https://github.com/OpenSCAP/scap-security-guide/"
                  rel="noreferrer" target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></font></span></blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
    </blockquote>
    <br>
  </body>
</html>