Tools

libMtxScap.dll (libMtxScap.so for Linux and Mac OS X)

This dynamic library actually implements the different SCAP standards except OVAL.

mtxscap.exe (mtxscap for Linux and Mac OS X)

This command line tool is a wrapper for the library above.

mtxoval.exe (mtxoval for Linux and Mac OS X)

This binary (which is a fork of the OVALDI open source software) actually implements the OVAL standard.

--mtxoval-path

Path to the mtxoval.exe (mtxoval under Linux and Mac OS X systems).

mtxoval.exe (mtxoval under Linux and Mac OS X)

--temp-path

Temporary path where temporary files required by the underlying process will be created.

temp

--oval-directives

full-with-system-characteristics

--xml-path

Path to the various XML schemas. This parameter may be omitted in which case the input SCAP files will not be validated.

--scap-file

Path to the SCAP file to process. In case of SCAP 1.0/1.1 content, multiple files can be supplied. In this case, the switch must be repeated for each file to supply (ex: --scap-file file1.xml -scap-file file2.xml)

--data-stream-id

Identifier of the data stream to process. This parameter is mainly required when processing SCAP content having more than a single data stream. If the SCAP content includes a single data stream, this parameter can be omitted.

--checklist-id

Identifier of the XCCDF checklist to process. This parameter is mainly required when processing a data stream having more than a single checklist. If the data stream includes a single checklist, this parameter can be omitted.

--profile-id

Identifier of the XCCDF profile to apply. This parameter is optional regardless of the number of profiles registered in the checklist to process. If this parameter is omitted, then no profile is applied.

--xccdf-exceptions-file

Path to an optional file where XCCDF rule identifiers are registered. These are exceptions and shall be taken into account in order to alter the scan results. As a consequence, the rules enumerated in this file will always have the status "pass", indicating exceptions to the official results.

--arf-results-file

Path to the output ARF results file. This parameter will be ignored unless the supplied SCAP content is version 1.2.

--xccdf-results-file

Path to the output XCCDF results file. This parameter is always available, whatever the processed SCAP version.

--error-path

Path to the output error file where key error code may be written. This file will only be emitted under certain conditions. For example, when the supplied SCAP content is not applicable to the system.

--log

Path to the desired output log file. This parameter accepts the special value "stdout", in which case, log lines will be written directly to console or terminal.

-parse

Request a SCAP content parsing operation. Depending on the xml path command line switch, this can be either a validating or non-validating parsing operation.

-print

Request a SCAP content print operation. This includes parsing the supplied SCAP content and displaying summary.

-eval

Request a SCAP content evaluation operation. Depending on the various switch values, ARF and/or XCCDF results files can be generated.

-quiet

Provides a mechanism for reducing the amount of data written to the console or terminal.

-no-banner

Avoid writing the banner to the console or terminal.

-o <path>

Path to the oval-definitions XML file.

definitions.xml

-b <identifier>

Identifier for the OVAL definitions component to retrieve. This parameter is mandatory when processing SCAP 1.2 content and should be omitted otherwise.

-v <string>

Path to the file where OVAL variables are configured.

external-variables.xml

-f <path>

Path to the file containing a list of OVAL definitions to be evaluated.

-m

Do not verify the input file with an MD5 hash.

-c <path>

Path to the Schematron OVAL definitions file. If this parameter is omitted, then no validation will be performed on the input file.

xml\oval-definitions-schematron.xsl

-a <path>

Path to the various XML schemas.

xml

-i <path>

Path to the system characteristics file to be used. If this parameter is omitted, then mtxoval will create a new system characteristics content.

-d <path>

Path to the output file where system characteristics should be written.

system-characteristics.xml

-g <path>

Path to the OVAL directives to be used.

directives.xml

-r <path>

Path to the output file where OVAL definitions results should be written.

results.xml

-s

Do not apply stylesheet to the results file.

-t <path>

Path to the stylesheet document to apply on results.

xml\results_to_html.xsl

-x <path>

Path to the file where transformed results must be written.

results.html

-j <path>

Path to the Schematron OVAL system characteristics file.

xml\oval- system-characteristics-schematron.xsl

-k <path>

Path to the Schematron OVAL results file.

xml\oval-results-schematron.xsl

-p

Provides verbose output.

-l <integer>

-p

Provides verbose output.