:) So more than likely the code would need an update. I wish all these 'SCAP' tools would export in the same format and be consistent across everyone. But the code above may clue you or another developer in if the XML is in a similar format as the other two. I will have time to look at this in a few weeks as I am in the middle of 2 other things. I have not seen contents of the XML for OpenSCAP so I am not in a place to say how a fix would happen. The file is the code that loads those XML files. Someone needs to study the format of the OpenSCAP XML and then compare it to the current tool code. They have the same format, but different named XML elements. Nessus's SCAP was the other one we got our hands on and that fix was fairly easy. I believe you need a CAC to get to that but if you are federal or DoD you can do that ( can verify). The SCAP scanner at DISA definitely works as that is the first one we did. I have not used that tool and have not tested but if you say it does not work, then it does not. Nothing else has been tested actually, including the OpenSCAP file result XML. We have on the upload page (to the right of the upload form) a message 'DoD SCAP as well as Nessus SCAP files should work fine' for that reason. OpenSCAP is currently not a supported SCAP result we can verify that we parse correctly. Results file succesfully uploads, and checklist generated for selected system.ĭesktop (please complete the following information): Choose Files, select XCCDF file produced by oscap xccdf eval -profile xccdf_profile_MAC-1_Sensitive -results /root/oscap/-results.xml -fetch-remote-resources /usr/share/xml/scap/ssg/content/U_RHEL_7_V3R2_STIG_SCAP_1-2_Benchmark.xml'.This is obviously cumbersome, so trying to understand what OpenRMF is looking for to successfully import the XCCDF formatted files. When I take the same XCCDF file and import it into STIG Viewer, I can then turn around and export the CKL file, which then imports correctly. ( d-xx-aa-bbbb-results.xml ) Click OK to continue! Check that they have a valid Hostname and format. You had 0 Checklists uploaded successfully! When I go to upload the XCCDF XML file in OpenRMF, I receive the following error: Using OpenSCAP 1.2, we are running scans using the latest STIGs (Jan) for Red Hat Enterprise Linux. We're automating our deployment of the DISA STIGs as we prep for FedRAMP.

Stig viewer mac