<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<div class="moz-cite-prefix">On 2/6/19 1:11 PM, Greg Silverman
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:856d3e7222df4400834ec15c56c905e5@vrtsxchclupin05.community.veritas.com">
<p class="MsoNormal">We want to use the DISA STIG for RHEL 7 V2R2
profile. The latest scap-security-guide RPM has V1R4. How is a
profile xml file consumed by oscap?</p>
</blockquote>
<p><br>
</p>
<p>Most use cases are covered in the RHEL documentation:<br>
<a class="moz-txt-link-freetext" href="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sect-using_oscap">https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sect-using_oscap</a></p>
<p>That said, has DISA started to publish OVAL for their content?
Was under the impression they did not (only publish XCCDF). <br>
</p>
</body>
</html>