<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 06/26/2015 10:06 AM, Mosley, Graham
A. (GSFC-6062)[GSFC - HIGHER EDUCATION] wrote:<br>
</div>
<blockquote class=" cite"
id="mid_E669F433_AE04_47DB_811A_86C6EFEACC7A_nasa_gov"
cite="mid:E669F433-AE04-47DB-811A-86C6EFEACC7A@nasa.gov"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<span style="font-size: 13px;">Hello,</span>
<div style="font-size: 13px;"><br>
</div>
<div style="font-size: 13px;">I was wondering if anyone had any
experience using CIS Security Benchmarks (<a
moz-do-not-send="true"
href="https://benchmarks.cisecurity.org/">https://benchmarks.cisecurity.org/</a>)
with OpenSCAP. I tried using the CentOS 7 and SLES 11 benchmarks
with OpenSCAP but receive errors about invalid OVAL definitions
(I assume this is because CIS Security has added their own
tests).</div>
<div style="font-size: 13px;"><br>
</div>
<div style="font-size: 13px;">Is there any way to fix this or is
OpenSCAP incompatible with CIS Security Benchmarks?</div>
</blockquote>
<br>
<br>
I'd have to look closely (and today is not a good day), but were I
to look, I'd check to see if any <a href="Joval">Joval</a>
extensions were in use (as well as a separate check language in an
"ecl" namespace prefix).<br>
<br>
OpenSCAP, otoh, is a validated SCAP 1.2 application (though I'm
unsure which OVAL version was used).<br>
<br>
CIS-CAT, otooh, is also SCAP 1.2 validated. My suspicion is that the
content (benchmarks) itself has been extended past SCAP 1.2.<br>
<br>
Or, there is a bug.<br>
</body>
</html>