$ sudo yum install -y openscap-scanner scap-security-guide
链接:https://pan.baidu.com/s/1QDMECfGgW0PUkjcuarUIjg
提取码:2hwp
链接:https://pan.baidu.com/s/1pQ-CVPDhrINvKP5RVjQ-UQ
提取码:zo06
$ oscap xccdf eval --results results.xml --profile xccdf_org.ssgproject.content_profile_pci-dss /usr/share/xml/scap/ssg/content/ssg-centos8-ds.xml
$ oscap xccdf generate report --output report.html results.xml
原文:https://blog.51cto.com/41084/2493984