[Open-scap] new to oscap. Question about oscap results

[Simon Lukasik]

On 10/22/2012 06:45 PM, wm-lists wrote:
> As a followup, I'm guessing it has something to do with the very old
> rpm's that Red Hat is currently using.  I upgraded the RPM's to 0.9.0-1
> and everything worked great.
> 

Yes, you are correct. The problem is that the older one fails to process
<xccdf:Rule> which contains two <xccdf:check> elements. This started to
appear in SSG content only recently.

We will work towards fixing this bug in upcoming Red Hat Enterprise
Linux 6 Update 4. And for the record, you may want to open a support
case with your vendor, and have this thing properly tracked.

In the mean time, you have two options. You may use unofficial build
openscap-0.9.0-1. Or you can use older content from SSG.

We are sorry for troubles and thanks for the report!

-- 
Simon Lukasik
Security Technologies