6.4. Performing Audit Scans

Procedure 6.1. To Perform an Audit Scan Using the Web Interface:

1. Log in to the Satellite web interface.
2. Click Systems system_name.
3. Click Audit Schedule.
4. Complete the Schedule New XCCDF Scan page. See Section 6.5.2.3, “Schedule Page” for information about the fields on this page.

   Warning

   The XCCDF content is validated before it is run on the remote system. Specifying invalid command-line arguments can cause spacewalk-oscap to fail to validate or run. Due to security concerns the oscap xccdf eval command only accepts a limited set of parameters.

Procedure 6.2. To Perform an Audit Scan Using the API:

1. Choose an existing script or create a script for scheduling a system scan through system.scap.scheduleXccdfScan, the front-end API, for example:

   #!/usr/bin/python
   import xmlrpclib
   client = xmlrpclib.Server('https://satellite.example.com/rpc/api')
   key = client.auth.login('username', 'password')
   client.system.scap.scheduleXccdfScan(key, 1000010001,
       '/usr/local/share/scap/usgcb-rhel5desktop-xccdf.xml',
       '--profile united_states_government_configuration_baseline')
   

   Copy to Clipboard Toggle word wrap
   Where:

   • 1000010001 is the system ID (sid).
   • /usr/local/share/scap/usgcb-rhel5desktop-xccdf.xml is the path to the content location on the client system. In this case, it assumes USGCB content in the /usr/local/share/scap directory.
   • --profile united_states_government_configuration_baseline is an additional argument to the oscap command. In this case, it is using the USGCB.
2. Run the script on the command-line interface of any system. The system needs the appropriate Python and XML-RPC libraries installed.