<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=Windows-1252"> </head> <body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"> <div>It looks like section 9.2.13 contains the unusual namespace (this is what Steve Grubb mentioned). CIS-CAT provides the schema x-unix-invalidhomedirownership.xml and I tried copying this into the OpenSCAP schema directory but it didn’t seem to work.</div> <div><br> </div> <div>I removed all references to 9.2.13 and was able to run a scan with OpenSCAP 1.2.3 using the —skip-vaild option. I did have 3 errors on sections 9.2.2-4 but that may be unrelated.</div> <div><br> </div> <div>My plan is to test using OpenSCAP 1.2.4 to see if the improved OVAL 5.11 support changes anything.</div> <br> <div> <div>On Jun 26, 2015, at 1:24 PM, Gary Gapinski <<a href="mailto:gapinski@nasa.gov">gapinski@nasa.gov</a>> wrote:</div> <br class="Apple-interchange-newline"> <blockquote type="cite"> <div bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On 06/26/2015 10:29 AM, Gary Gapinski wrote:<br> </div> <blockquote class=" cite" id="mid_558D61E1_8000104_nasa_gov" cite="mid:558D61E1.8000104@nasa.gov" type="cite"> My suspicion is that the content (benchmarks) itself has been extended past SCAP 1.2.<br> </blockquote> <br> Looking at the June 2015 CIS-CAT release and its CentOS 7 OVAL content, I find neither oscap or my validating editor like it.<br> <br> <tt>oscap oval validate </tt><tt>CIS_CentOS_Linux_7_Benchmark_v1.1.0-oval.xml</tt> fails.<br> <br> That document has at least three errors, one of which is the presence of an unusual namespace <tt><a class="moz-txt-link-freetext" href="http://oval.mitre.org/XMLSchema/x-unix-invalidhomedirownership">http://oval.mitre.org/XMLSchema/x-unix-invalidhomedirownership</a></tt> which is used at lines 4346 and 5560.<br> <br> The document asserts it is OVAL v5.11.<br> </div> </blockquote> </div> <br> </body> </html>