From Openscap
Download
Current Release: 0.9.8 (Jun 17, 2013)
- added experimental support for offline mode scanning to the OVAL check engine (i.e. scanning of virtual host disk images)
- improved OVAL variables processing
- bug fixes and dead code removal
A tarball is available at openscap-0.9.8.tar.gz.
SHA1 checksum: 3ac7bb6d4e5bf24df9505b1e300b9961eb0fe511
Archives can be found at https://fedorahosted.org/releases/o/p/openscap.
Fedora
OpenSCAP is available on Fedora repositories. To install the library, oscap tool and SCAP content run:
# yum install openscap openscap-utils openscap-content
Red Hat Enterprise Linux 6
The latest OpenSCAP is provided for Red Hat Enterprise Linux 6 from OpenSCAP repository. This version could be installed along with the official Red Hat OpenSCAP package thanks to Software Collection technology.
Follow these steps to install OpenSCAP and Software Collections support.
# wget -O /etc/yum.repos.d/openscap.repo http://repos.fedorapeople.org/repos/gitopenscap/openscap/epel-6-openscap.repo # yum install scap-testing-openscap scap-testing-openscap-utils scap-testing-openscap-content
Use scl command to run oscap tool from the Software Collection.
# scl enable scap-testing `oscap -V`
Please note, these packages are OpenSCAP community binary builds, packaged with RPM. The packages are not support by Red Hat.
Source Repository
The source repository for OpenSCAP is stored in git. Clone the repository by
$ git clone git://git.fedorahosted.org/git/openscap.git
API
API changes and compatibility report is available at http://upstream-tracker.org/versions/openscap.html
SCAP Content
Official
- The United States Government Configuration Baseline (USGCB): http://usgcb.nist.gov/usgcb/rhel/download_rhel5.html
- Red Hat patch definitions for security updates: http://www.redhat.com/security/data/oval/
- National Checklist Program Repository: http://web.nvd.nist.gov/view/ncp/repository
- scap-security-guide: https://fedorahosted.org/scap-security-guide/
Testing
- Red Hat Enterprise Linux 6.2 OpenSCAP repository
- Fedora Content OpenSCAP repository
Script Check Engine
- Sectool tests available in XCCDF+SCE format. OpenSCAP repository
