Home / server / Questions / 1143017
Accepted
TheRamblingLank
Asked: 2023-09-04 22:58:30 +0800 CST

OpenSCAP SCE script in Source DataStream file

  • 772

I am new to OpenSCAP, and have a query about SCE scripts and the DataStream format.

The SCE documentation for OpenSCAP states:

The SCE scripts can be part of a Source DataStream. DataStream is a format that packs multiple SCAP components into a single file.

How can a shell script be encapsulated into a DataStream file and used within an xccdf Rule definition? I have been unable to find any examples of this being done and the documentation does not provide an example or syntax.

This thread suggests that there is an 'extended-components' tag but I am still unaware of the usage of this tag.

Many thanks for any help.

openscap

1 Answers

  1. Best Answer

    It's been a while since I did this, but I would suggest you start with

    $ oscap ds sds-create INPUT_XCCDF_FILE.xml OUTPUT_SDS_FILE.xml

    IIRC, oscap will take SCE scripts referenced from that XCCDF_FILE (relative filesystem path) and put them into the datastream.

    • 0