----- Original Message ----- > From: "Grant Schoep" <[email protected]> > To: "SCAP Security Guide" <[email protected]> > Sent: Sunday, November 16, 2014 4:38:30 PM > Subject: Re: First time running openscap, getting notapplicable > > I did try running one of the xccdf file that it looks like you deliver > builtin. Same issue, I don't see the STDERR warning about ./oval.xml being > skipped. But still get "notapplicable" Trying.. > > oscap xccdf eval --profile RHEL6-Default --results hey2.xml > ./share/openscap/scap-rhel6-xccdf.xml > > This was on my RHEL6 machine (note I am being "careful" to be using oscap > from my 1.1.1 build, and not the one that comes in RPM from Redhat > themselves. > > my guess is that oscap is thinking I am running something else. Not > matching cpe:/o:redhat:enterprise_linux:6 (or 5) > > Without mucking with the code(which I can) just wondering if there is a way > to print out what oscap thinks is the machine. Or, if you can point me to a > good place to put a printf, I could rebuild it.
Try `oscap oval eval --results /tmp/x.xml /usr/share/openscap/cpe/openscap-cpe-oval.xml`. And paste the x.xml file somewhere. It seems to me that you are getting false for all of the OVAL definitions. -- Martin Preisler -- SCAP Security Guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide https://github.com/OpenSCAP/scap-security-guide/
