[Open-scap] Problems Running Scripts on Scientific Linux 5.8 (UNCLASSIFIED)

Boucher, William William.Boucher at mza.com
Fri Mar 1 21:06:20 UTC 2013


Worked! Thanks. Now to document that and have accrediting authority approve so we can procede.

-----Original Message-----
From: open-scap-list-bounces at redhat.com [mailto:open-scap-list-bounces at redhat.com] On Behalf Of Shaw, Ray V CTR (US)
Sent: Friday, March 01, 2013 10:12 AM
To: open-scap-list at redhat.com
Subject: Re: [Open-scap] Problems Running Scripts on Scientific Linux 5.8 (UNCLASSIFIED)

Classification: UNCLASSIFIED
Caveats: NONE

Removing the <platform> tag allows the checks to run on RHEL6 and CentOS5, so I imagine it might allow them to run on SL as well:

perl -p -i -e 's/[^<!--]<platform.*[^-->]$//g'
U_RedHat_5_V1R2_STIG_Benchmark-xccdf.xml

--
Ray Shaw
Contractor, STG
Unix support, Army Research Labs


> -----Original Message-----
> From: open-scap-list-bounces at redhat.com [mailto:open-scap-list- 
> bounces at redhat.com] On Behalf Of Shawn Wells
> Sent: Friday, March 01, 2013 11:44 AM
> To: open-scap-list at redhat.com
> Subject: Re: [Open-scap] Problems Running Scripts on Scientific Linux
> 5.8
> 
> On 3/1/13 11:38 AM, Boucher, William wrote:
> 
> 
> 
> 
> 	My versions:
> 
> 	$ cat /etc/redhat-release ; rpm -qv openscap openscap-utils
> 
> 	Scientific Linux release 5.8 (Boron)
> 
> 	Openscap-0.9.2-1.el5.i386
> 
> 	Openscap-utils-0.9.2-1.el5.i386
> 
> 
> 
> 	Upon my first attempt, the following errors were produced:
> 
> 	# oscap xccdf eval --profile MAC-3_Public --results /tmp/results.xml 
> --report /tmp/report.html --oval results --cpe 
> /tmp/U_RedHat_5_V1R2_STIG_Benchmark-cpe-dictionary.xml
> /tmp/U_RedHat_5_V1R2_STIG_Benchmark-xccdf.xml
> 
> 	File '/tmp/U_RedHat_5_V1R2_STIG_Benchmark-cpe-dictionary.xml'
> line 3: Element '{http://cpe.mitre.org/dictionary/2.0}cpe-item',
> attribute 'name' : [facet 'pattern'} The value 
> 'cpe:/o:redhat:enterprise_linux:5' is not accepted by the pattern 
> '[c][pP][eE]:/[AHOaho]?(A-Za-z0-9\._\-~%]*){0,6}'.
> 
> 
> 
> The RHEL5 STIG has checks to ensure you're running on the RHEL 
> platform. Since you're running on Scientific these checks will fail, 
> throwing that CPE error above.
> 


Classification: UNCLASSIFIED
Caveats: NONE






More information about the Open-scap-list mailing list