<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 06/26/2015 10:29 AM, Gary Gapinski wrote: </div> <blockquote class=" cite" id="mid_558D61E1_8000104_nasa_gov" cite="mid:558D61E1.8000104@nasa.gov" type="cite"> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> My suspicion is that the content (benchmarks) itself has been extended past SCAP 1.2. </blockquote> Looking at the June 2015 CIS-CAT release and its CentOS 7 OVAL content, I find neither oscap or my validating editor like it. <tt>oscap oval validate </tt><tt>CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml</tt> fails. That document has at least three errors, one of which is the presence of an unusual namespace <tt><a class="moz-txt-link-freetext" href="http://oval.mitre.org/XMLSchema/x-unix-invalidhomedirownership">http://oval.mitre.org/XMLSchema/x-unix-invalidhomedirownership</a></tt> which is used at lines 4346 and 5560. The document asserts it is OVAL v5.11. </body> </html>