<html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> On a fresh-out-of-the-box+updated RHEL7 (with openscap-scanner-1.2.10-3.el7_3.x86_64) <blockquote> oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common --report /tmp/report.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml This content points out to the remote resources. Use `--fetch-remote-resources' option to download them. WARNING: Skipping <a class="moz-txt-link-freetext" href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a> file which is referenced from XCCDF content </blockquote> The scan goes off/generates reports, but in order to heed the the WARNING, I try to get the latest remote OVAL file <blockquote> oscap xccdf eval --fetch-remote-resources --profile xccdf_org.ssgproject.content_profile_common --report /tmp/report-remote.html /usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml Downloading: <a class="moz-txt-link-freetext" href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a> ... ok OpenSCAP Error: Unable to parse XML from user memory buffer [oscap_source.c:254] Failed to create OVAL definition model from: '<a class="moz-txt-link-freetext" href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>'. [xccdf_session.c:787] </blockquote> and the scan terminates. Is that a problem with the remote file (Red_Hat_Enterprise_Linux_7.xml) or an 'oscap' bug? </body> </html>