From Openscap


Current Release: 1.0.8 (Mar 26, 2014)


- fixes related to Asset Reporting Format
  - Inject arf:report/@id into nested rule-result/check/check-content-ref/@href
  - Add hostname for each fqdn when generating ARF asset identification data
  - Add all MAC addresses from target-facts to ARF as asset identification data

A tarball is available at openscap-1.0.8.tar.gz.

SHA512 checksum: 58fcc90198f82572505fd907351edc9d9609bc036c0cd1c0ab433056eea70a0baf362c811ab7990b8766ef6090a2a0a600803a9c3537d1867c56304d91fe20ff

Archives can be found at


OpenSCAP is available on Fedora repositories. To install the library, oscap tool and SCAP content run:

# yum install openscap openscap-utils openscap-content

Red Hat Enterprise Linux 6

The latest OpenSCAP is provided for Red Hat Enterprise Linux 6 from OpenSCAP repository. This version could be installed along with the official Red Hat OpenSCAP package thanks to Software Collection technology.

Follow these steps to install OpenSCAP and Software Collections support.

# wget -O /etc/yum.repos.d/openscap.repo
# yum install scap-testing-openscap scap-testing-openscap-utils scap-testing-openscap-content

Use scl command to run oscap tool from the Software Collection.

# scl enable scap-testing `oscap -V`

Please note, these packages are OpenSCAP community binary builds, packaged with RPM. The packages are not support by Red Hat.

Source Repository

The source repository for OpenSCAP is stored in git. Clone the repository by

$ git clone git://

Web access


API changes and compatibility report is available at

SCAP Content



Script Check Engine

Views Article Discussion Edit History
Personal tools:  Log in / create account
Toolbox What links here Related changes Upload file Special pages Printable version