+1 for zip file! R/ Vince From: Shawn Wells <shawn@redhat.com<mailto:shawn@redhat.com>> Organization: Red Hat Reply-To: "scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>" <scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>> Date: Wednesday, February 13, 2013 12:35 PM To: "scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>" <scap-security-guide@lists.fedorahosted.org<mailto:scap-security-guide@lists.fedorahosted.org>> Subject: Fwd: SCAP Compliance Checker 3.1 Final Release Question for the group: The SCC tool requires that content be packaged in a zip file, and has no current or planned capability to read files from the industry accepted location of /usr/share/xml/scap/*. Should we create a zip file in addition to the RPM? -------- Original Message -------- Subject: SCAP Compliance Checker 3.1 Final Release Date: Wed, 13 Feb 2013 11:16:33 -0500 From: SSC LANT-SCC <ssc_lant-scc.fcm@navy.mil><mailto:ssc_lant-scc.fcm@navy.mil> To: SSC LANT-SCC <ssc_lant-scc.fcm@navy.mil><mailto:ssc_lant-scc.fcm@navy.mil> We would like to thank everyone that was involved in the SCC 3.1 Beta and Release Candidate testing over the past month. We are pleased to announce that we have finished development of SCC 3.1. Since several bugs were fixed from SCC 3.0.2 to SCC 3.1, we highly recommend upgrading to SCC 3.1. You'll be receiving an email from AMRDEC in the next hour with download instructions Primary Changes from SCC 3.0.x to 3.1 For All Platforms . Updated default location for Logs and Results to be dynamic based on each user's profile/home directory. . Added applicable DISA STIG SCAP Benchmarks to each installer. . Added new OVAL Processing Options, which allows the user to exclude certain OVAL features which known to cause system resource issues. . Added support for OVAL 'unique' function. . Added support for OVAL 'count' function. . Added ability to copy results via SSH to a centralized server. . Improved OCIL functionality to allow for resuming of partially completed questionnaires. . Improved documentation in the User Manual. For Windows . Added ability to install and run as a service. . Added support for case insensitivity to several OVAL tests . Added support for OVAL windows cmdlet test, object, state. . Updated registry tests to support OVAL 5.10 'windows_view'. . Updated file test to support OVAL 5.10 'windows_view'. For UNIX For all UNIX (Linux, Solaris, Mac OS X) . Added support for OVAL UNIX fileextendedattribute test, object, state. . Added support for UNIX sysctl test, object, state. For Linux . Added support for linux selinuxboolean test, object, state. . Added support for linux selinuxsecuritycontext test, object, state. . Added support for linux rpmverifyfile test, object, state. . Added support for linux rpmverify test, object, state. . Added support for linux rpmverifypackage test, object, state. For Solaris . Added support for Solaris packagecheck test, object, state. For Mac OS X Added support for Mac OS X including all applicable UNIX, Independent and all macos oval tests. Kyle R. Stone SPAWAR Systems Center Atlantic Code 58600 (843) 218-5091 kyle.r.stone@navy.mil<mailto:kyle.r.stone@navy.mil>

On 02/13/2013 12:35 PM, Shawn Wells wrote: I haven't used SCC, but NIST distributes content as zip archives, and many tools expect precisely that.

I will be testing 3.1 SCC tomorrow hopefully. Off to grab your content and zip it up :-) Shawn, I have used the SSG content through with the SCC tool in the past, it was no issue to compress it and add the content. Just nothing states that it must be a zip file to import properly. Having the content avail already zipped for SCC import would be nice. Hopefully SCC gets a timely update, because I just use OpenSCAP for now. R/ Brian Peake On Feb 13, 2013, at 12:35 PM, Shawn Wells <shawn(a)redhat.com&gt; wrote: