DOKK / manpages / debian 12 / openscap-utils / oscap-chroot.8.en
oscap-chroot(8) System Administration Utilities oscap-chroot(8)

oscap-chroot - Tool for offline SCAP evaluation of filesystems mounted at arbitrary paths.

oscap-chroot runs oscap tool on it in a filesystem mounted at given path.

Usage of the tool mimics usage and options of oscap(8) tool.

$ oscap-chroot CHROOT_PATH xccdf eval [options] INPUT_CONTENT

supported oscap xccdf eval options are:
--profile
--tailoring-file
--tailoring-id
--cpe (external OVAL dependencies are not supported yet!)
--oval-results
--check-engine-results
--results
--results-arf
--report
--skip-valid
--skip-validation
--fetch-remote-resources
--local-files
--progress
--datastream-id
--xccdf-id
--benchmark-id

$ oscap-chroot image CHROOT_PATH oval eval [options] INPUT_CONTENT

supported oscap oval eval options are:
--id
--variables
--directives
--results
--report
--skip-valid
--skip-validation
--datastream-id
--oval-id

$ oscap-chroot CHROOT_PATH oval collect [options] INPUT_CONTENT

supported oscap oval collect options are:
--id
--syschar
--variables
--skip-valid
--skip-validation

Please report bugs using https://github.com/OpenSCAP/openscap/issues

Martin Preisler <mpreisle@redhat.com>
February 2016 Red Hat, Inc.