<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 4/6/17 11:10 AM, Przemek Klosowski
wrote:<br>
</div>
<blockquote cite="mid:fe306523-5d54-f2f2-02c4-95c9f34c7c1d@nist.gov"
type="cite">
<div class="moz-text-html" lang="x-unicode">
<p>On a fresh-out-of-the-box+updated RHEL7 (with
openscap-scanner-1.2.10-3.el7_3.x86_64)<br>
</p>
<blockquote>
<p>oscap xccdf eval --profile
xccdf_org.ssgproject.content_profile_common --report
/tmp/report.html
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml<br>
This content points out to the remote resources. Use
`--fetch-remote-resources' option to download them.<br>
WARNING: Skipping <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>
file which is referenced from XCCDF content</p>
</blockquote>
<p>The scan goes off/generates reports, but in order to heed the
the WARNING, I try to get the latest remote OVAL file <br>
</p>
<blockquote>
<p>oscap xccdf eval --fetch-remote-resources --profile
xccdf_org.ssgproject.content_profile_common --report
/tmp/report-remote.html
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml<br>
Downloading: <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>
... ok<br>
OpenSCAP Error: Unable to parse XML from user memory buffer
[oscap_source.c:254]<br>
Failed to create OVAL definition model from:
'<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>'.
[xccdf_session.c:787]<br>
</p>
</blockquote>
<p>and the scan terminates. Is that a problem with the remote
file (Red_Hat_Enterprise_Linux_7.xml) or an 'oscap' bug?<br>
</p>
</div>
</blockquote>
<br>
I get the exact same error - looks like a bug<br>
<br>
$ cat /etc/redhat-release ; uname -a ; rpm -qv openscap-scanner ;
free -m<br>
Red Hat Enterprise Linux Server release 7.3 (Maipo)<br>
Linux devbox 3.10.0-514.10.2.el7.x86_64 #1 SMP Mon Feb 20 02:37:52
EST 2017 x86_64 x86_64 x86_64 GNU/Linux<br>
openscap-scanner-1.2.10-3.el7_3.x86_64<br>
<br>
</body>
</html>