oscap-chroot(8)

💖 NAME 💖

okay so listen — oscap-chroot is the tool for offline SCAP evaluation of filesystems mounted at arbitrary paths. that's the whole vibe. no cap. ✨

---

🦋 DESCRIPTION 🦋

bestie, here's the tea: oscap-chroot runs the oscap tool on it inside a filesystem that's mounted at whatever path you hand it. that's literally it. the way it just… does that. 😌

and the usage of this tool mimics the usage and options of the oscap(8) tool, so if you already know that one, you're already slaying. iykyk. 💅

---

🌸 USAGE 🌸

✨ Evaluation of XCCDF content ✨

$ oscap-chroot CHROOT_PATH xccdf eval [options] INPUT_CONTENT

supported oscap xccdf eval options are, and no we are NOT skipping any of them, periodt:

  --profile
  --tailoring-file
  --tailoring-id
  --cpe (external OVAL dependencies are not supported yet!)
  --oval-results
  --check-engine-results
  --results
  --results-arf
  --report
  --skip-validation
  --fetch-remote-resources
  --local-files
  --progress
  --datastream-id
  --xccdf-id
  --benchmark-id

heads up though: for --cpe, external OVAL dependencies are not supported yet! so don't come for me when that one doesn't do the thing. 🫶

---

🎀 Evaluation of OVAL content 🎀

$ oscap-chroot image CHROOT_PATH oval eval [options] INPUT_CONTENT

supported oscap oval eval options are, again, the full lineup:

  --id
  --variables
  --directives
  --results
  --report
  --skip-validation
  --datastream-id
  --oval-id

---

🌈 Collection of OVAL System Characteristic 🌈

$ oscap-chroot CHROOT_PATH oval collect [options] INPUT_CONTENT

supported oscap oval collect options are — yes, all of them, we're thorough like that:

  --id
  --syschar
  --variables
  --skip-validation

---

👑 REPORTING BUGS 👑

found something cursed? don't suffer in silence bestie. please report bugs using https://github.com/OpenSCAP/openscap/issues — the maintainers will literally thank you for it. 🐛✨

---

🫶 AUTHORS 🫶

Martin Preisler <mpreisle@redhat.com> — an absolute icon, no notes. 💖

---

and that's a wrap, bestie! this little masterpiece came to you from Red Hat, Inc., dated February 2016, and it's the oscap-chroot(8) page. go forth and evaluate some filesystems offline. slay. 💅🌸✨