1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
COMPILATION
-----------
Get fresh sources from repository:
$ git clone git://git.fedorahosted.org/git/openscap.git (git)
- requirements: autoconf automake libtool
$ ./autogen.sh
You are OK with tarball from official release
- requirements:
(some of these can be turned off via configure)
libacl-devel
libcap-devel
libcurl-devel
libgcrypt-devel
libselinux-devel
libxml2-devel
libxslt-devel
make
openldap-devel
pcre-devel
perl-XML-Parser
perl-XML-XPath
perl-devel
python-devel
rpm-devel
swig
$ ./configure
$ make
$ make check
# make install
USE CASES
---------
SCAP Content Validation
$ oscap xccdf validate-xml FILE
$ oscap oval validate-xml FILE
Scanning
# oscap xccdf eval --profile Desktop --results XCCDF-RESULT-FILE XCCDF-FILE
# scap oval eval --results OVAL-RESULT-FILE OVAL-FILE
# scap oval eval --id DEFINITION-ID OVAL-FILE
Document generation
- without XCCDF rules
$ oscap xccdf generate guide XCCDF-FILE > XCCDF-GUIDE-FILE
- with XCCDF rules rules
$ oscap xccdf generate guide --profile PROFILE XCCDF-FILE > XCCDF-GUIDE-FILE
- generate report from scanning
$ oscap xccdf generate report XCCDF-RESULT-FILE > XCCDF-REPORT-FILE
|
