$ sudo yum install -y openscap-scanner scap-security-guide$ oscap info /usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml$ oscap xccdf eval --results results.xml --profile xccdf_org.ssgproject.content_profile_pci-dss /usr/share/xml/scap/ssg/content/ssg-centos7-ds.xml$ oscap xccdf generate report --output report.html results.xml原文:http://blog.51cto.com/41084/2065046