- Find a dictionary and cpe to use ssg-rhel7-ds.xml as mentioned here for Centos 6
- A working ssg-centos7-ds.xml, this because it is no longer in the oscap-security-guide package. I was also unsuccessful compiling with .
Code: Select all
/build_product --derivatives rhel7
With the latter I get multiple failures for the rule xccdf_org.ssgproject.content_rule_security_patches_up_to_date as seen in the image https://ibb.co/gyds1HJ .
The command used for this was:
Code: Select all
oscap xccdf eval --fetch-remote-resources --rule xccdf_org.ssgproject.content_rule_security_patches_up_to_date --results /opt/openscap/scanRule.xml --report /opt/openscap/scanRule.html / root /content/build/ssg-centos7-ds.xml