On a fresh-out-of-the-box+updated RHEL7 (with
openscap-scanner-1.2.10-3.el7_3.x86_64)
oscap xccdf eval --profile
xccdf_org.ssgproject.content_profile_common --report
/tmp/report.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
This content points out to the remote resources. Use
`--fetch-remote-resources' option to download them.
WARNING: Skipping
http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml
file which is referenced from XCCDF content
The scan goes off/generates reports, but in order to heed the the
WARNING, I try to get the latest remote OVAL file
oscap xccdf eval --fetch-remote-resources --profile
xccdf_org.ssgproject.content_profile_common --report
/tmp/report-remote.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml
Downloading:
http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml
... ok
OpenSCAP Error: Unable to parse XML from user memory buffer
[oscap_source.c:254]
Failed to create OVAL definition model from:
'http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml'.
[xccdf_session.c:787]
and the scan terminates. Is that a problem with the remote file
(Red_Hat_Enterprise_Linux_7.xml) or an 'oscap' bug?
_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list
