3
3
oscap-docker \- Tool for running oscap within docker container or image
4
4
.SH DESCRIPTION
5
5
oscap-docker tool can asses vulnerabilities or security compliance of running Docker
6
- containers or cold Docker images. OpenSCAP tool (oscap) is used underneath. Definition
6
+ containers or cold Docker images. OpenSCAP tool \fB oscap(8) \fR is used underneath. Definition
7
7
of vulnerabilities (CVE stream) is downloaded from product vendor.
8
8
9
9
.SS Compliance scan of Docker image
10
10
Usage: oscap-docker image IMAGE_NAME OSCAP_ARGUMENT [OSCAP_ARGUMENT...]
11
11
12
- Run any OpenSCAP (oscap) command within chroot of mounted docker image. Learn more
13
- about oscap arguments in oscap (8) man page.
12
+ Run any OpenSCAP \fB oscap(8) \fR command within chroot of mounted docker image. Learn more
13
+ about arguments in \fB oscap (8)\fR man page.
14
14
15
15
.SS Compliance scan of Docker container
16
16
Usage: oscap-docker container CONTAINER_NAME OSCAP_ARGUMENT [OSCAP_ARGUMENT...]
17
17
18
- Run any OpenSCAP (oscap) command within chroot of mounted docker container. Result
18
+ Run any OpenSCAP \fB oscap(8) \fR command within chroot of mounted docker container. Result
19
19
of this command may differ from scanning just an image due to defined mount points.
20
20
21
21
.SS "Vulnerability scan of Docker image"
@@ -30,6 +30,8 @@ Usage: oscap-docker container-cve CONTAINER_NAME [--results oval-results-file.xm
30
30
Chroot to running container, determine OS variant/version, download CVE stream applicable
31
31
to the given OS and finally run a vulnerability scan.
32
32
33
+ In order to use different \fB oscap(8) \fR binary pass it like --oscap=<path/to/oscap>, as the first argument.
34
+
33
35
.SH SECURITY POLICIES
34
36
.TP
35
37
\fB SCAP-Security-Guide \fR package contains multiple configuration policies.
0 commit comments