Re: [Open-scap] OSCAP-SCANNER on RHEL7

2017-04-05 Thread Jan Cerny
Hi, Your command # yum -y install openscap-scanner should work, because OpenSCAP is a standard component of RHEL 7. Check your software repositories configuration, eg. output of "yum repolist" command, and /etc/yum.repos.d/ directory. Check if you are able to install other packages. Regards J

[Open-scap] results not being checked in disa stig

2017-04-05 Thread Greg Hennessy
I am exploring the use of open-scap to verify my machines meet the DISA stigs. If I run oscap against the /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml file things seem to work as expected. If I run oscap against the file from iase.disa.mil, all of the results show "notchecked". Does anyone hav

Re: [Open-scap] results not being checked in disa stig

2017-04-05 Thread Shawn Wells
On 4/5/17 1:43 PM, Greg Hennessy wrote: > I am exploring the use of open-scap to verify my machines meet > the DISA stigs. If I run oscap against the > /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml file things seem to work > as expected. If I run oscap against the file from iase.disa.mil > <

Re: [Open-scap] results not being checked in disa stig

2017-04-05 Thread Shawn Wells
On 4/5/17 2:54 PM, Greg Hennessy wrote: > Bummer > > On Wed, Apr 5, 2017 at 1:53 PM, Shawn Wells > wrote: > > > > On 4/5/17 1:43 PM, Greg Hennessy wrote: >> I am exploring the use of open-scap to verify my machines meet >> the DISA stigs. If I run oscap again

[Open-scap] Using scap workbench to scan Debian on Beaglebone Black

2017-04-05 Thread Luther Goh Lu Feng
I have installed SCAP Workbench on Mac OS X[1] and attempted to scan a Beaglebone Black with Debian installed remotely. Debian has been installed with OpenSCAP[2]. However the scan threw up a lot of errors and didn't complete. I am only including a small subset of the errors so as not to overwhe