Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Martin Preisler
On Thu, Mar 23, 2017 at 4:34 PM, Mohanraj, Bharath wrote: > Thankyou for the clarification. So, other than Linux which other platforms > does oscap scanner support? Linux and Solaris. -- Martin Preisler ___ Open-scap-list mailing list Open-scap-list

Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Mohanraj, Bharath
Thankyou for the clarification. So, other than Linux which other platforms does oscap scanner support? -Original Message- From: Martin Preisler [mailto:mprei...@redhat.com] Sent: Friday, March 24, 2017 1:54 AM To: Mohanraj, Bharath Cc: open-scap-list@redhat.com Subject: Re: [Open-scap] O

Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Martin Preisler
On Thu, Mar 23, 2017 at 4:21 PM, Mohanraj, Bharath wrote: > Let me explain in detail on what I'm looking for, and please help me > understand if that can be achieved. > > I have installed open-scap scanner on a Linux machine. Using the command-line > options available in oscap scanner, I evaluat

Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Mohanraj, Bharath
Let me explain in detail on what I'm looking for, and please help me understand if that can be achieved. I have installed open-scap scanner on a Linux machine. Using the command-line options available in oscap scanner, I evaluate the Linux machine against a xccdf security content and the result

Re: [Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Martin Preisler
OpenSCAP itself can be compiled on and used on MacOS X in a special mode with "--disable-probes". In this mode it will be able to parse all the content but not evaluate OVAL on the target machine. We use this to build SCAP Workbench on MacOS X. Check out http://static.open-scap.org/scap-workbench-1

[Open-scap] OSCAP on Mac OS X

2017-03-23 Thread Mohanraj, Bharath
Hi There, Can someone help me understand how OSCAP scanner can be used on a Mac OS X. Any pointers or doc notes will really help. Regards, Bharath M ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open

Re: [Open-scap] customizing generation of mediation scripts

2017-03-23 Thread Jan Cerny
Hi, The bash code is taken from the input SCAP content, eg. from /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml there is no magic behind that, basically oscap simply extracts snippets from XML. If you want to amend the script that is generated by oscap, unfortunately that is not possible, we do