<div dir="ltr"><div dir="ltr"><div>Hi William, </div><div> </div><div>it seems that you are using the option to fetch remote resources when performing a scan. This feature requires access to a remote server which hosts this extra file (which usually is used to check CVE's [1]). One way to workaround this would be hosting this file by yourself and change the datastream [2] to point to your localhost file (python3 enable you to do that in a simple way. <code>python3 -m http.server)</code>, but keep in mind that updating this file would be under your control.</div><div> </div><div>If you have further questions, please let me know. </div><div> </div><div>[1] <a href="https://github.com/ComplianceAsCode/content/blob/master/linux_os/guide/system/software/updating/security_patches_up_to_date/rule.yml#L60">https://github.com/ComplianceAsCode/content/blob/master/linux_os/guide/system/software/updating/security_patches_up_to_date/rule.yml#L60</a> </div>[2] /usr/share/xml/scap/ssg/ssg-<product>-ds.xml or /usr/share/xml/scap/ssg/ssg-<product>-xccdf.xml</div></div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, May 6, 2019 at 10:47 PM Boucher, William <<a href="mailto:William.Boucher@mza.com">William.Boucher@mza.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div lang="EN-US"> <div class="gmail-m_8312147895401721489WordSection1"> Hi folks, I’m using SCAP Workbench with Open SCAP to remediate CentOS 7.5 (actually RedHawk 7.5) systems to evaluate and apply the DISA STIG controls. My problem isn’t in getting this to work, I’m networked to the system I am applying controls to and remediation and report generation works fine. However, when SCAP Workbench begins a scan it downloads the latest rules from the internet and uses the downloaded material to perform, the scan/remediation. This is fine for trying things out, but ultimately what I need this for is to harden systems that may not ever touch or be connected to the internet. How can I configure SCAP Workbench to use files I download elsewhere and installed manually on the system running SCAP Workbench. All of these wonderful tools are useless to me unless I can do this without internet. The customer demands this. Help. Thanks, --Bill William B. Boucher, BSEE Embedded Systems Software Engineer Information Systems Security Manager MZA Associates Corporation 4900 Lang Ave. NE, Suite 100 Albuquerque, NM 87109-9708 Phone: 505.245.9970 x166 Fax: 505.245.9971 Cell: 505.459.7620 <a href="mailto:william.boucher@mza.com" target="_blank">william.boucher@mza.com</a> </div> </div> _______________________________________________ Open-scap-list mailing list <a href="mailto:Open-scap-list@redhat.com" target="_blank">Open-scap-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/open-scap-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/open-scap-list</a></blockquote></div> -- <div dir="ltr" class="gmail_signature"><div dir="ltr"><div> Gabriel Gaspar Becker Software Engineer <a style="color:rgb(0,136,206);font-size:12px;margin:0px;text-decoration:none;font-family:"RedHatText",sans-serif" href="https://www.redhat.com" target="_blank">Red Hat </a> <div style="margin-bottom:4px"> </div> <div style="margin-top:12px"> <table border="0"> <tbody><tr> <td width="100px"><a href="https://red.ht/sig" target="_blank"> <img src="https://static.redhat.com/libs/redhat/brand-assets/latest/corp/logo.png" width="90" height="auto"></a> </td> </tr> </tbody></table> </div> </div></div></div>