[Open-scap] What does this error mean?

Erinn Looney-Triggs erinn.looneytriggs at gmail.com
Mon Feb 17 20:12:21 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/17/2014 01:04 PM, Steve Grubb wrote:
> On Monday, February 17, 2014 12:53:39 PM Erinn Looney-Triggs
> wrote:
>> Using scap-workbench on Fedora 20, trying to scan a remote
>> system:
>> 
>> 12:48:22 | [info] Opened file 
>> '/usr/share/xml/scap/ssg/fedora/ssg-fedora-xccdf.xml'.
>> 
>> 12:48:36 | [err ] There was a problem when setting up the
>> scanner. Details follow: There was a problem with
>> OscapScannerRemoteSsh! You can only use source datastreams for
>> scanning remotely!
>> 
>> The above doesn't make much sense to me, perhaps it should be
>> changed around a bit to be a little more verbose for us mere
>> mortals ;)
> 
> If you are doing remote scanning, you need the xccdf, oval, and cpe
> files. The tool is expecting the content to be sent as a datastream
> which means that all 3 are combined into 1 file using a specific
> format (in the SCAP 1.2 specification). What this is saying is the
> content being used to scan with is not a data stream and it cannot
> resolve the objects in order to do a scan.
> 
> -Steve
> 

Thanks Steve.

Well having zip for experience with this, how do you make that happen
with scap-workbench? It doesn't seem to offer enough fields to fulfill
those requirements, but maybe I am missing something.

- -Erinn
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJTAm0gAAoJEFg7BmJL2iPOxnQH/0UJmBrO5v+a1k4iFCIrrYK0
GWCsdw94e70GKY8EdDE5srxahRgLPOMYaPH1cD7HZKg4BhfCLVERyZCoCA5aL407
+kiYIaWbUEYi44p38s+3e8/OJUNxPtc5ujMIBj6vNCn8+DDDQ1VanwmL/bdq53uA
pnbgows+KyA7YNBAgQvt+/boB+akNKfeTaOVpyOn7JM5dcwANJZI5YDJ19byAYMo
rCp9QpW93oB/a+IkzWI7om6OOrfBLxc8kPFiWKI9jC2zKnb/37OgIsuQPMU2Q90i
3JOYlV/7hW3zA9HTV3wm/rcn8NTjpFKXAtZj+yh3FZy31pP5B+ZtKBFGUyWLYt8=
=5RQH
-----END PGP SIGNATURE-----




More information about the Open-scap-list mailing list