OpenSCAP

wikipedia:OpenSCAP

• Configuration: /etc/oscapd/config.ini

Packages:

• openscap-daemon: oscapd, oscapd-cli, oscapd-evaluate
• scap-workbench
• oscap-docker

Installation

• apt install openscap-daemon
• systemctl status oscapd

Execution

oscap -V

oscap xccdf eval
ERROR:    XCCDF file need to be specified!
Usage:    oscap [options] xccdf eval [options] INPUT_FILE [oval-definitions-files]
Help:     oscap xccdf eval -h

Directory: https://people.canonical.com/~ubuntu-security/oval/
wget https://people.canonical.com/~ubuntu-security/oval/com.ubuntu.bionic.cve.oval.xml
oscap oval eval --results /tmp/oscap_results.xml --report /tmp/oscap_report.html com.ubuntu.bionic.cve.oval.xml

Related terms

• RHEL8 Security Hardening
• CCE
• oscap
• Spacewalk

See also

• SCAP, OpenSCAP, /etc/oscapd/config.ini, oscap, OVAL, XCCDF, oscap -V, /etc/oscapd/
• Tripwire
• Hardening: CIS, OpenSCAP, Hardenite, patching, Chef InSpec