I noticed, in running the RHEL7 data stream, that there were many checks with
status 'notchecked'. Inspecting the data stream document I see that several of
the check references in the XCCDF refer to checks that do not exist in the
OVAL. Is this a known deficiency? I assume that the RHEL7 content is still
being refined.
PS- I'd love to get involved in this project but I'm really just getting
exposed to SCAP and trying to really understand the interrelationships between
the various SCAP components. Does anyone have a really concise reference to get
me started?
Thanks,
Les
--
SCAP Security Guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/
