Re: [Open-scap] Using scap workbench to scan Debian on Beaglebone Black

2017-04-06 Thread Luther Goh Lu Feng
For some strange reason, after a reboot, I have managed to scan without issue using - SCAP Workbench - CLI: oscap xccdf eval --fetch-remote-resources --results debian-xccdf.xml --report debian-xccdf.html --profile xccdf_org.ssgproject.content_profile_common ssg-debian8-ds.xml Just wish to d

Re: [Open-scap] fetch remote resources on RHEL7 fails

2017-04-06 Thread Shawn Wells
On 4/6/17 11:10 AM, Przemek Klosowski wrote: > > On a fresh-out-of-the-box+updated RHEL7 (with > openscap-scanner-1.2.10-3.el7_3.x86_64) > > oscap xccdf eval --profile > xccdf_org.ssgproject.content_profile_common --report > /tmp/report.html /usr/share/xml/scap/ssg/content/ssg-rhel7-d

Re: [Open-scap] Using scap workbench to scan Debian on Beaglebone Black

2017-04-06 Thread Luther Goh Lu Feng
Having installed OpenSCAP 1.2.9, the workbench run is much more successful. However there are still errors, albeit much lesser than before. Any tips? 01:58:28 info Establishing connecting to remote target... 01:58:32 info Connection established. 01:58:32 info Checking if oscap is a

Re: [Open-scap] Using scap workbench to scan Debian on Beaglebone Black

2017-04-06 Thread Luther Goh Lu Feng
On Thursday, April 6, 2017 10:20 PM, Luther Goh Lu Feng wrote: Thanks for the suggestion! I will most certainly attempt to installĀ  OpenSCAP 1.2.9 from testing. I am still very much a noob figuring out my way around the various security concepts such as OVAL, XCCDF. So pardon me if

[Open-scap] fetch remote resources on RHEL7 fails

2017-04-06 Thread Przemek Klosowski
On a fresh-out-of-the-box+updated RHEL7 (with openscap-scanner-1.2.10-3.el7_3.x86_64) oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common --report /tmp/report.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml This content points out to the remote resources. Use

Re: [Open-scap] Using scap workbench to scan Debian on Beaglebone Black

2017-04-06 Thread Jan Cerny
Hi, That is pretty cool that you want to run OpenSCAP on such a device. I like it! You're the first person that I know running it on ARM :) I think the problem is that Debian Jessie has OpenSCAP 1.0.9, which is an old version that doesn't support systemd related tests and it also can't process OV