As it is written in the documentation, I can generate fix for the whole profile: oscap xccdf generate fix --profile ospp /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml > fix.sh If I want to generate a fix for a single rule I need to workaround by evaluating a single rule first: oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_ospp --results results.xml --rule xccdf_org.ssgproject.content_rule_partition_for_var_log_audit /usr/share/xml/scap/ssg/content/ssg-rhel8-ds.xml oscap x...
