<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi Gabe,<br>
<br>
Thank you for your reply. I'm trying to use the 0.1.23 release, but
having issues building the content. The error I get is:<br>
<br>
<tt>Skipping datastream composition, use OpenSCAP 1.2.2 or later!</tt><tt><br>
</tt><tt>mkdir -p dist/content</tt><tt><br>
</tt><tt>cp output/ssg-fedora-xccdf.xml dist/content</tt><tt><br>
</tt><tt>cp output/ssg-fedora-oval.xml dist/content</tt><tt><br>
</tt><tt>cp output/ssg-fedora-ds.xml dist/content</tt><tt><br>
</tt><tt>cp: cannot stat `output/ssg-fedora-ds.xml': No such file or
directory</tt><tt><br>
</tt><tt>make[1]: *** [dist] Error 1</tt><tt><br>
</tt><tt>make[1]: Leaving directory
`/root/scap-security-guide-0.1.23/Fedora'</tt><tt><br>
</tt><tt>make: *** [fedora] Error 2</tt><br>
<br>
I suspect the missing "ssg-fedora-ds.xml" has something to do with
the "Skipping datastream composition" message above?<br>
<br>
I'm on CentOS6, and this is the version I got from the yum repos:<br>
<br>
<tt>[root@openscap-testing scap-security-guide-0.1.23]# rpm -qa
openscap\*</tt><tt><br>
</tt><tt>openscap-1.0.8-1.0.1.el6.centos.1.x86_64</tt><tt><br>
</tt><tt>openscap-content-1.0.8-1.0.1.el6.centos.1.noarch</tt><tt><br>
</tt><tt>openscap-utils-1.0.8-1.0.1.el6.centos.1.x86_64</tt><br>
<br>
So, is this a matter of not being compatible with the version of
openscap I'm using? Or, is the make process suppose to handle older
versions of openscap more gracefully?<br>
<br>
Thanks,<br>
-Bond<br>
<br>
<br>
<div class="moz-cite-prefix">On 06/30/2015 03:54 PM, Gabe Alford
wrote:<br>
</div>
<blockquote
cite="mid:CAGLxfGwxHwPP2NjB=wVBL2C6+o3Qo9-0RQB+JRg2nWV6_bxqXw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>
<div>
<div>
<div>
<div>
<div>Hey Bond,<br>
<br>
</div>
As of SCAP Security Guide release 0.1.23, CentOS
content is now available (any older version will
require tweaking). See the announcement here: <a
moz-do-not-send="true"
href="https://lists.fedorahosted.org/pipermail/scap-security-guide/2015-June/006462.html"
target="_blank">https://lists.fedorahosted.org/pipermail/scap-security-guide/2015-June/006462.html</a><br>
<br>
</div>
You can download and build the SSG content from <a
moz-do-not-send="true"
href="https://github.com/OpenSCAP/scap-security-guide"
target="_blank">https://github.com/OpenSCAP/scap-security-guide</a><br>
<br>
</div>
When you run the XCCDF, you have to specify the CentOS
XCCDF like below:<br>
<br>
# oscap xccdf eval --profile stig-rhel6-server-upstream \<br>
--results /tmp/`hostname`-ssg-results.xml \<br>
--report /tmp/`hostname`-ssg-results.html \<br>
--cpe
/usr/share/xml/scap/ssg/content/ssg-centos6-cpe-dictionary.xml
\<br>
/usr/share/xml/scap/ssg/content/ssg-centos6-xccdf.xml<br>
<br>
</div>
Please note that I believe that
ssg-centos6-cpe-dictionary.xml is not being built with SSG.
OpenSCAP is here: <a moz-do-not-send="true"
href="https://github.com/openscap/openscap"
target="_blank">https://github.com/openscap/openscap</a>
and the announcement here: So I believe all that needs to be
done is:<br>
<br>
# oscap xccdf eval --profile stig-rhel6-server-upstream \<br>
--results /tmp/`hostname`-ssg-results.xml \<br>
--report /tmp/`hostname`-ssg-results.html \<br>
/usr/share/xml/scap/ssg/content/ssg-centos6-xccdf.xml<br>
<br>
</div>
Thanks, <br>
<br>
</div>
Gabe<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Tue, Jun 30, 2015 at 3:56 PM, Bond
Masuda <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:bond.masuda@hexadiam.com" target="_blank">bond.masuda@hexadiam.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
Is there a guide on how to use the RHEL SCAP content for
CentOS? When I<br>
try to use it, I get a lot of "Result: notapplicable". What
needs to be<br>
done?<br>
<br>
I'm using it with OpenSCAP per the manual:<br>
<br>
# oscap xccdf eval --profile stig-rhel6-server-upstream \<br>
--results /tmp/`hostname`-ssg-results.xml \<br>
--report /tmp/`hostname`-ssg-results.html \<br>
--cpe
/usr/share/xml/scap/ssg/content/ssg-rhel6-cpe-dictionary.xml
\<br>
/usr/share/xml/scap/ssg/content/ssg-rhel6-xccdf.xml<br>
<br>
TIA,<br>
-Bond<br>
<span class="HOEnZb"><font color="#888888">--<br>
SCAP Security Guide mailing list<br>
<a moz-do-not-send="true"
href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
<a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide"
rel="noreferrer" target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
<a moz-do-not-send="true"
href="https://github.com/OpenSCAP/scap-security-guide/"
rel="noreferrer" target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></font></span></blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>