1. Using OpenSCAP for Security Compliance
  2. Installing SCAP Packages

2 Installing SCAP Packages

Use dnf to install the SCAP packages from the Oracle Linux 8 AppStream repository.

  1. Verify the ol8_appstream repository is enabled.
  2. Use dnf to install the packages. For example:
    sudo dnf install openscap openscap-utils scap-security-guide

Available Packages

The following SCAP packages are available:

  • openscap-utils - Contains command-line tools that use the OpenSCAP library.
  • openscap-scanner - Provides the oscap command-line configuration and vulnerability scanner, which can perform compliance checking against SCAP content including the SCAP Security Guide. This is automatically installed as a dependency of the openscap-utils package.
  • openscap - Provides the OpenSCAP open-source libraries for generating SCAP-compliance documentation.
  • scap-security-guide - Provides system-hardening guidance in SCAP format, including links to government requirements. The guide provides security profiles that you can modify to comply with the security policies that you have established for your site.

For information about SCAP package features and other changes in Oracle Linux 8, see the release notes for the various Oracle Linux 8 releases at Oracle Linux 8 documentation.