Hi Clarence, Did you try using behavior?
In your file_object definition, place a line like this: <behaviors recurse="directories" recurse_direction="down" max_depth="-1" recurse_file_system="local" /> This would ensure that only local file system will be scanned avoiding any NFS shares. You can read about file behaviors at http://oval.mitre.org/language/version5.11/ovaldefinition/documentation/unix-definitions-schema.html#FileBehaviors Hope that helps. Thanks and regards, Pravin Goyal ________________________________ From: [email protected] <[email protected]> on behalf of [email protected] <[email protected]> Sent: Friday, June 10, 2016 9:30 PM To: [email protected] Subject: Open-scap-list Digest, Vol 87, Issue 2 Send Open-scap-list mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit https://www.redhat.com/mailman/listinfo/open-scap-list or, via email, send a message with subject or body 'help' to [email protected] You can reach the person managing the list at [email protected] When replying, please edit your Subject line so it is more specific than "Re: Contents of Open-scap-list digest..." Today's Topics: 1. How to prevent OpenScap from scanning NFS shares (Hart, Clarence L.) ---------------------------------------------------------------------- Message: 1 Date: Tue, 7 Jun 2016 17:47:45 +0000 From: "Hart, Clarence L." <[email protected]> To: "[email protected]" <[email protected]> Subject: [Open-scap] How to prevent OpenScap from scanning NFS shares Message-ID: <[email protected]> Content-Type: text/plain; charset="us-ascii" Hi All, How do you prevent the openscap [probe_file] application from scanning NFS shares. We have share directories mounted on every box but it TB of random software and applications. All of my OpenScap clients are scanning these directories and it take about 29 hours to complete. I need to know if there's a file that I could simply list the directories I want this tool to skip. That would be great. Thanks CoolC -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://www.redhat.com/archives/open-scap-list/attachments/20160607/061cc55e/attachment.html> ------------------------------ _______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list End of Open-scap-list Digest, Vol 87, Issue 2 *********************************************
_______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
