Re: [Open-scap] OSCAP-SCANNER on RHEL7

2017-04-11 Thread Pittigher, Raymond
is this what you are looking for? https://myopensourcelife.com/2016/04/16/installation-based-compliance-with-scap-and-rhel/ - Ray Pittigher --Harris --phone 973-284-2275 --email rpitt...@harris.com From: Mohanraj, Bharath Sent: Tuesday, April 4, 2017 3:05

Re: [Open-scap] running a 64 bit machine but remediation creates 32 bit rules

2017-04-11 Thread Josh Moore
Got it. Thanks, Josh On Apr 3, 2017, 5:56 AM -0400, Jan Lieskovsky , wrote: > Hello Josh, > > > > > Hi I am using oscap on centos 7.1 to run a PCI profile check.  The system is > > 64 bit (see arch and uname -a).  However, when I run the remediation I get > > some 32 bit runs (see /etc/audit/ru

Re: [Open-scap] OSCAP-SCANNER on RHEL7

2017-04-11 Thread Pittigher, Raymond
Try using scap-workbench - Ray Pittigher --Harris --phone 973-284-2275 --email rpitt...@harris.com From: open-scap-list-boun...@redhat.com on behalf of Mohanraj, Bharath Sent: Tuesday, April 4, 2017 2:41 PM To: open-scap-list@redhat.com Subject: [Market

[Open-scap] Using OpenSCAP for vulnerability assessment

2017-04-11 Thread Luther Goh Lu Feng
I see that OpenSCAP has a vulnerability assessment function[1]. I wish to confirm if this functionality is present in the SCAP Workbench? I would like to know OpenSCAP compares with other tools like OpenVAS[2] and Vuls[3] in vulnerability assessment of existing software. Are they an apple to a