While executing insights-client --compliance command, it can not find the SCAP profile on client system and the command fails with "XML profile file not found matching"

Solution Verified - Updated -

Issue

  • Why are some OpenSCAP profiles not available in more recent version of RHEL even though they were supported on previous versions?
    Example: The Standard System Security Profile is provided by scap-security-guide package for RHEL 6.x and RHEL 7.x but it is not available for RHEL8.x

  • While executing insights-client --compliance command it fails with below error:

    # insights-client --compliance
    XML profile file not found matching ref_id xccdf_org.ssgproject.content_profile_standard
    
  • SCAP Profiles provided by scap-security-guide package for each major (RHEL 6, RHEL 7, RHEL 8) and its minor versions (eg RHEL 6.7, RHEL 7.3) are not matching.

Environment

  • Red Hat Enterprise Linux 6.x, 7.x, 8.x
  • Use of Compliance service within Red Hat Insights (console.redhat.com)
  • OpenSCAP

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content