On a fresh-out-of-the-box+updated RHEL7 (with openscap-scanner-1.2.10-3.el7_3.x86_64)

   oscap xccdf eval --profile
   xccdf_org.ssgproject.content_profile_common --report
   /tmp/report.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
   This content points out to the remote resources. Use
   `--fetch-remote-resources' option to download them.
   WARNING: Skipping
   http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml
   file which is referenced from XCCDF content

The scan goes off/generates reports, but in order to heed the the WARNING, I try to get the latest remote OVAL file

   oscap xccdf eval --fetch-remote-resources --profile
   xccdf_org.ssgproject.content_profile_common --report
   /tmp/report-remote.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
   Downloading:
   http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml
   ... ok
   OpenSCAP Error: Unable to parse XML from user memory buffer
   [oscap_source.c:254]
   Failed to create OVAL definition model from:
   'http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml'.
   [xccdf_session.c:787]

and the scan terminates. Is that a problem with the remote file (Red_Hat_Enterprise_Linux_7.xml) or an 'oscap' bug?

_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to