oscap-chroot (8) Linux Manual Page

oscap-chroot – Tool for offline SCAP evaluation of filesystems mounted at arbitrary paths.

Description

oscap-chroot runs oscap tool on it in a filesystem mounted at given path. Usage of the tool mimics usage and options of oscap(8) tool.

Usage

Evaluation of XCCDF content

$ oscap-chroot CHROOT_PATH xccdf eval [options] INPUT_CONTENT

supported oscap xccdf eval options are:
  –profile
  –tailoring-file
  –tailoring-id
  –cpe (external OVAL dependencies are not supported yet!)
  –oval-results
  –sce-results
  –check-engine-results
  –results
  –results-arf
  –report
  –skip-valid
  –fetch-remote-resources
  –progress
  –datastream-id
  –xccdf-id
  –benchmark-id

Evaluation of OVAL content

$ oscap-chroot image CHROOT_PATH oval eval [options] INPUT_CONTENT

supported oscap oval eval options are:
  –id
  –variables
  –directives
  –results
  –report
  –skip-valid
  –datastream-id
  –oval-id
  –probe-root

Collection of OVAL System Characteristic

$ oscap-chroot CHROOT_PATH oval collect [options] INPUT_CONTENT

supported oscap oval collect options are:
  –id
  –syschar
  –variables
  –skip-valid

Reporting Bugs

Please report bugs using https://github.com/OpenSCAP/openscap/issues

Authors

Martin Preisler <mpreisle [at] redhat.com>