ubuntu24 xccdf every rule says notapplicable

[positivepanda]

Hello everyone,

i downloaded the latest content and after cmake i got the ssg-ubuntu2404-xccdf.xml for scanning CIS level 1 benchmark. But every rule says not applicable. I dont know if i did something wrong or since this is a draft version of profile for ubuntu24 and its not working.

Is ubuntu24 even supported at this moment?

# oscap --version
OpenSCAP command line tool (oscap) 1.3.9
Copyright 2009--2023 Red Hat Inc., Durham, North Carolina.

==== Supported specifications ====
SCAP Version: 1.3
XCCDF Version: 1.2
OVAL Version: 5.11.1
CPE Version: 2.3
CVSS Version: 2.0
CVE Version: 2.0
Asset Identification Version: 1.1
Asset Reporting Format Version: 1.1
CVRF Version: 1.1

# oscap xccdf eval  --profile xccdf_org.ssgproject.content_profile_cis_level1_server ssg-ubuntu2404-xccdf.xml
--- Starting Evaluation ---

Title   Package "prelink" Must not be Installed
Rule    xccdf_org.ssgproject.content_rule_package_prelink_removed
Result  notapplicable

Title   Install AIDE
Rule    xccdf_org.ssgproject.content_rule_package_aide_installed
Result  notapplicable

Title   Build and Test AIDE Database
Rule    xccdf_org.ssgproject.content_rule_aide_build_database
Result  notapplicable

# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 24.04 LTS
Release:        24.04
Codename:       noble

[mpurg]

Hi @positivepanda !

Make sure you have these files available on the system which you're scanning:

# ls -1 ssg-ubuntu2404-*
ssg-ubuntu2404-cpe-dictionary.xml
ssg-ubuntu2404-cpe-oval.xml
ssg-ubuntu2404-oval.xml
ssg-ubuntu2404-xccdf.xml

Then include the --cpe ssg-ubuntu2404-cpe-dictionary.xml in the command line:

# oscap xccdf eval  --profile xccdf_org.ssgproject.content_profile_cis_level1_server --cpe ssg-ubuntu2404-cpe-dictionary.xml  ssg-ubuntu2404-xccdf.xml

Much appreciated that you are testing out the draft profile! 💯

[positivepanda]

@mpurg Thank you so much for letting me know the fix. its working fine now. i will continue to test it on my end.