Understand, just my personal security learning, and shared to interested people. thanks for the reply. Johnny Hughes <johnny at centos.org> 于2019年9月5日周四 下午11:47写道： > On 9/3/19 3:27 AM, Sep0lkit wrote: > > We use oval to check the system vulnerability. > > > > Redhat offer official oval(https://www.redhat.com/security/data/oval/), > and > > it works well on redhat. > > > > There is no official centos oval, and using redhat oval on centos got > > false results. > > centos is based redhat, so I wrote a script fetch redhat oval files and > > convert it to useful for centos. > > > > And I push the oval to my github: > https://github.com/Sep0lkit/oval-for-el > > > > Everyone interested in this can try to use it and tell me it works > > correctly or not. > > That is because CentOS Linux does not now, nor has it ever provided any > certification of Security patches. We build source code released for > RHEL, but provide no certification or assurance of any kind. > > Individual users must do and provide their own security testing and any > validation. > > Thanks, > Johnny Hughes > > >