[Solved in comment 27] How to use openscap on Ubuntu or Debian?

It seems that OpenSuSe has OVAL xmls published at http://support.novell.com/security/oval/.
But I can't find such xml-files for Debian and Ubuntu.

https://launchpad.net/ubuntu/+source/openscap

May be some help.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

I still need an answer. Michael's answer do not satisfy me.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

I still need an answer.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

Locations for OVAL xml definitions for various distros:

Suse:
http://ftp.suse.com/pub/projects/security/oval/

Red Hat:
https://www.redhat.com/security/data/oval/

Ubuntu:
https://people.canonical.com/~ubuntu-security/oval/

Debian:
https://www.debian.org/security/oval/

Unfortunately the Debian definitions are out of date, but there is work being done to remedy that. See

   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=738199

for more details.

Thank you for reply, Marcus!

What is correct way to check Ubuntu 12.04 system with 'com.ubuntu.precise.cve.oval.xml' file?
What programs and/or packages should I install? Which command produce OVAL's scan results of my system?

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

Thank you for reply, Marcus!

What is correct way to check Ubuntu 12.04 system with 'com.ubuntu.precise.cve.oval.xml' file?
What programs and/or packages should I install? Which command produce OVAL's scan results of my system?

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

Thank you for reply, Marcus!

What is correct way to check Ubuntu 12.04 system with 'com.ubuntu.precise.cve.oval.xml' file?
What programs and/or packages should I install? Which command produce OVAL's scan results of my system?

As temporary solution I discovered useful site - https://vulners.com - it can Audit package list and show unpatched CVEs.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

Thank you for reply, Marcus!

What is correct way to check Ubuntu 12.04 system with 'com.ubuntu.precise.cve.oval.xml' file?
What programs and/or packages should I install? Which command produce OVAL's scan results of my system?

As temporary solution I discovered useful site - https://vulners.com - it can Audit package list and show unpatched CVEs.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

Thank you for reply, Marcus!

What is correct way to check Ubuntu 12.04 system with 'com.ubuntu.precise.cve.oval.xml' file?
What programs and/or packages should I install? Which command produce OVAL's scan results of my system?

As temporary solution I discovered useful site - https://vulners.com - it can Audit package list and show unpatched CVEs.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

I still need an answer.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

I still need an answer.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

I still need an answer.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

I still need an answer.

This question was expired because it remained in the 'Open' state without activity for the last 15 days.

Thank you for your support :)

I wrote step by step guide to answer my question.

# get dependencies
 # for 12.04
 sudo apt-get install build-essential libcurl4-openssl-dev libxslt1-dev libgcrypt11-dev

 # for 14.04 and 16.04
 sudo apt-get install build-essential cmake libqt4-dev libxslt1-dev libcurl4-openssl-dev libz-dev autoconf libtool libpcre3-dev asciidoctor git checkinstall libgcrypt-dev

# build and install OpenSCAP
 # for 12.04, 14.04, 16.04
 cd /tmp
 git clone https://github.com/OpenSCAP/openscap
 cd openscap
 git checkout maint-1.2
 ./autogen.sh
 ./configure --prefix /usr --disable-python --disable-util-oscap-docker
 make -j4
 sudo checkinstall make install # specify version 1.2.14

# get OVAL
cd /tmp
 # for 12.04
 wget https://people.canonical.com/~ubuntu-security/oval/com.ubuntu.precise.cve.oval.xml
 # for 14.04
 wget https://people.canonical.com/~ubuntu-security/oval/com.ubuntu.trusty.cve.oval.xml
 # for 16.04
 wget https://people.canonical.com/~ubuntu-security/oval/com.ubuntu.xenial.cve.oval.xml

# check
 # for 12.04
 oscap oval eval --results /tmp/results-precise.xml --report /tmp/report-precise.html /tmp/com.ubuntu.precise.cve.oval.xml
 firefox /tmp/report-precise.html
 # for 14.04
 oscap oval eval --results /tmp/results-trusty.xml --report /tmp/report-trusty.html /tmp/com.ubuntu.trusty.cve.oval.xml
 firefox /tmp/report-trusty.html
 # for 16.04
 oscap oval eval --results /tmp/results-xenial.xml --report /tmp/report-xenial.html /tmp/com.ubuntu.xenial.cve.oval.xml
 firefox /tmp/report-xenial.html

## SCAP Workbench (14.04 and 16.04)
 # build and install SCAP Workbench
 cd /tmp
 git clone https://github.com/OpenSCAP/scap-workbench
 cd scap-workbench
 git checkout v1-1
 mkdir build
 cd build/
 cmake ../
 make -j4
 sudo checkinstall make install # change name (2) to scap-workbench

# run scap-workbench on Ubuntu 16.04
 cd /tmp
 # compile
 git clone https://github.com/OpenSCAP/scap-security-guide.git
 cd scap-security-guide
 sudo apt-get install xsltproc libxml2-utils expat python-lxml
 make

 # or get compiled version
 wget https://github.com/OpenSCAP/scap-security-guide/releases/download/v0.1.31/scap-security-guide-0.1.31-oval-5.10.zip
 unzip scap-security-guide-0.1.31-oval-5.10.zip
 cd scap-security-guide-0.1.31-oval-5.10
 scap-workbench ssg-ubuntu1604-ds.xml

This solution is based on:
https://www.redhat.com/archives/open-scap-list/2016-March/msg00010.html
https://martin.preisler.me/wp-content/uploads/2016/12/USENIX-LISA-2016-Security-Compliance-for-Containers-and-VMs-with-OpenSCAP.pdf

Solved!

Solved!

scap-workbench compilation on 12.04 is as follows:

# get dependencies
sudo apt-get install build-essential cmake libqt4-dev libxslt1-dev libcurl4-openssl-dev libz-dev autoconf libtool libpcre3-dev git checkinstall libgcrypt-dev

## SCAP Workbench (12.04)
cd /tmp
git clone https://github.com/OpenSCAP/scap-workbench
cd scap-workbench
git checkout v1-1
mkdir build
cd build/
touch /tmp/scap-workbench/doc/user_manual.html # Ubuntu 12.04 does not have asciidoctor package
cmake ../
make -j4
sudo checkinstall make install # change name (2) to scap-workbench

That's all.

The followup to this forum helped me figure out where to get the XML files for Ubuntu 16.04. Thank you.