There is no official CentOS oval, and using redhat oval on CentOS got false results. CentOS is based redhat, so I wrote a script fetch redhat oval files and convert it to useful for CentOS.
Everyone interested in this can try to use it and tell me it works correctly or not.
That is because CentOS Linux does not now, nor has it ever provided any certification of Security patches. We build source code released for RHEL, but provide no certification or assurance of any kind.
Individual users must do and provide their own security testing and any validation.
Thanks, Johnny Hughes
Understand, just my personal security learning, and shared to interested people.
3 thoughts on - OVAL Support For CentOS
We use oval to check the system vulnerability.
Redhat offer official oval(https://www.redhat.com/security/data/oval/), and it works well on redhat.
There is no official CentOS oval, and using redhat oval on CentOS got false results. CentOS is based redhat, so I wrote a script fetch redhat oval files and convert it to useful for CentOS.
And I push the oval to my github: https://github.com/Sep0lkit/oval-for-el
Everyone interested in this can try to use it and tell me it works correctly or not.
That is because CentOS Linux does not now, nor has it ever provided any certification of Security patches. We build source code released for RHEL, but provide no certification or assurance of any kind.
Individual users must do and provide their own security testing and any validation.
Thanks, Johnny Hughes
Understand, just my personal security learning, and shared to interested people.
thanks for the reply.
Johnny Hughes 于2019年9月5日周四 下午11:47写道：
CentOS mailing list CentOS@CentOS.org https://lists.CentOS.org/mailman/listinfo/CentOS