Martin,
I've been struggling with the oscap syntax but I think I got it right. See
the attachment for the output of:
*oscap xccdf eval --profile eap5_full --results xccdf_out.xml --report
xccdf.html --oval-results eap5-xccdf.xml eap5-oval.xml*
regards,
Ivan
---------- Forwarded message ----------
From: Martin Preisler <mpreisle(a)redhat.com>
Date: Mon, May 5, 2014 at 3:53 PM
Subject: Re: oscap & jboss on Fedora
To: Ivan Saez Scheihing <saezscheihing(a)gmail.com>
----- Original Message -----
From: "Ivan Saez Scheihing"
<saezscheihing(a)gmail.com>
To: "Martin Preisler" <mpreisle(a)redhat.com>
Sent: Monday, May 5, 2014 2:04:04 PM
Subject: Re: oscap & jboss on Fedora
Martin,
Xccdfexec is java tool which can be used to run the Jboss Eap5 scap
benchmark. It can be downloaded from
http://sourceforge.net/projects/xccdfexec/
This tools is mentioned in the JBossEAP5_Guide.html.
This tool isn't related to openscap AFAIK. I can't find any mention of
openscap in the source code. If you are using it for evaluation you need to
reach xccdfexec upstream, we can't help you with their project.
I've run the following command: oscap oval eval --results oval-results.xml
eap5-oval.xml
The output of this is attached.
regards,
Ivan
I can confirm that these are OVAL results. It would be better if you
provided: `oscap xccdf eval --results xccdf-results.xml --oval-results
eap5-oval.xml`
But there will do. Could you please send this to the public mailing list? I
prefer these sorts of discussions to be public so that more people can
chime in. 95 kB should not get held up in the moderation queue.
--
Martin Preisler