Score:1

Installing SCAP Security Guide for 22.04.1

pm flag

I am unable to install the scap-security-guide on Ubuntu 22.04.1

I followed the documentation on http://static.open-scap.org/ssg-guides/ssg-ubuntu2204-guide-index.html but it shows a package that can not be installed. The site it redirects me to (https://www.open-scap.org/security-policies/scap-security-guide/) asks to perform the install of the following packages for Ubuntu newer than 18.04:

apt install ssg-base ssg-debderived ssg-debian ssg-nondebian ssg-applications

None of the above packages seem to be available for Ubuntu 22.04.1.

Is there a way I can have the OpenSCAP Security Guide installed on Ubuntu 22.04 systems? Are we compelled to use the usg package to perform Security scans on Ubuntu 22.04 systems?

Score:2
ly flag

It's not available on Ubuntu 22.04.1 repositories but it's an opensource project with means you can download source code and compile profiles (main reason i love unix) Documents

apt-get install cmake make expat libopenscap8 libxml2-utils ninja-build python3-jinja2 python3-yaml python3-setuptools xsltproc

git clone -b master https://github.com/ComplianceAsCode/content.git
cd content/build/
cmake ../
make -j4

ls -lah ssg-ubuntu2204*
oscap info ssg-ubuntu2204-ds-1.2.xml
oscap info --profile xccdf_org.ssgproject.content_profile_cis_level2_server ssg-ubuntu2204-ds-1.2.xml
 
oscap xccdf eval --results result.xml --profile xccdf_org.ssgproject.content_profile_cis_level2_server ssg-ubuntu2204-ds-1.2.xml
oscap xccdf generate report result.xml > report.html
Score:0
re flag

Building the Guide and openscap on your machine is certainly possible but can be painful if you don't do that sort of thing every day. I was in the same boat and needed to test on focal so I did some backports here. It's much easier to use the PPA than build from source.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.