oscap-chroot man page

oscap-chroot — Tool for offline SCAP evaluation of filesystems mounted at arbitrary paths.

Description

oscap-chroot runs oscap tool on it in a filesystem mounted at given path.

Usage of the tool mimics usage and options of oscap(8) tool.

Usage

Evaluation of XCCDF content

$ oscap-chroot CHROOT_PATH xccdf eval [options] INPUT_CONTENT

supported oscap xccdf eval options are:
--profile
--tailoring-file
--tailoring-id
--cpe (external OVAL dependencies are not supported yet!)
--oval-results
--sce-results
--check-engine-results
--results
--results-arf
--report
--skip-valid
--fetch-remote-resources
--progress
--datastream-id
--xccdf-id
--benchmark-id

Evaluation of OVAL content

$ oscap-chroot image CHROOT_PATH oval eval [options] INPUT_CONTENT

supported oscap oval eval options are:
--id
--variables
--directives
--results
--report
--skip-valid
--datastream-id
--oval-id
--probe-root

Collection of OVAL System Characteristic

$ oscap-chroot CHROOT_PATH oval collect [options] INPUT_CONTENT

supported oscap oval collect options are:
--id
--syschar
--variables
--skip-valid

Reporting Bugs

Please report bugs using https://github.com/OpenSCAP/openscap/issues

Authors

Martin Preisler <mpreisle@redhat.com>

Info

February 2016 Red Hat, Inc. System Administration Utilities