On 11/1/12 6:43 PM, Brian Peake wrote:
Shawn,
I just checked the DISA website for SCC 3.02 and there is
documentation avail in PDF. Unfortunately, it is PKI (CAC) required to
download. Because of this, I cannot send to you.
However, I'll type up a quick howto to run your content with SCC tool
tomorrow AM. Send to you or post on the list?
I have a copy of SCC but haven't
been able to make it work yet. Tried
manually editing the options.xml file, creating a zip.... clearly I'm
doing something wrong. Sending out your notes would be incredibly
helpful and could lay the foundation for us documenting how the RHEL6
STIG & SSG can be used with SCC; please feel free to post to the list as
it's very on topic.
Key piece is to zip the SSG content (the 4 XML files) and then use
the
SCC tool to import it. Click on the "test" profile to change it to
server etc... After that I can select analyze and it gives me the
results in HTML format and XML.
I will be playing tomorrow and will compare results between using SCC
and OpenSCAP with SSG content to see if they agree etc...
That'd be incredibly
helpful, thank you!