<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 4/5/17 1:43 PM, Greg Hennessy wrote:<br>
</div>
<blockquote
cite="mid:CA+mZaOO+UGk915zH0YQzO2O7acJOpo4L8MXxpySoUR1zNZ1a2Q@mail.gmail.com"
type="cite">I am exploring the use of open-scap to verify my
machines meet
<div>the DISA stigs. If I run oscap against the </div>
<div>/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml file things
seem to work</div>
<div>as expected. If I run oscap against the file from <a
moz-do-not-send="true" href="http://iase.disa.mil">iase.disa.mil</a>,
all </div>
<div>of the results show "notchecked". Does anyone have a
sugguestion as to</div>
<div>how to force the checks to happen?</div>
<div><br>
</div>
<div>My typed command line is:</div>
<div><br>
</div>
<div>
<div># oscap xccdf eval --profile MAC-2_Public --report
/tmp/disa_stig.html
U_Red_Hat_Enterprise_Linux_7_STIG_V1R1_Manual-xccdf.xml</div>
</div>
</blockquote>
<br>
DISA does not publish automation content -- so it's impossible to
use their content. <br>
</body>
</html>