Hi Rocio,

Yes, the result of an XCCDF check can be "informational".
The XCCDF specification [1] says that:

The <xccdf:Rule> was checked, but the output from the checking engine is simply
information for auditors or administrators; it is not a compliance category. 
This status value is
designed for <xccdf:Rule> elements whose main purpose is to extract information 
from the
target rather than test the target.

>From what I understand, this value is used for rules that are evaluated, but 
>not going to be
counted into the result score (do not affect the score). That happens if you 
have an XCCDF rule
with attribute "role" set to "unscored". 
However I am sorry I haven't found any check in OpenSCAP that is using this.

Regarding your second question, OpenSCAP >= 1.2.2 can display OVAL results
in the HTML report if you run it with "--oval-results", eg.:

# oscap xccdf eval --results results.xml --oval-results --report report.html 
my_benchmark.xml

The HTML report will look like in [2].

[1] http://csrc.nist.gov/publications/nistir/ir7275-rev4/NISTIR-7275r4.pdf 
(page 43)
[2] 
https://www.open-scap.org/wp-content/uploads/2015/09/ssg-rhel7-ds-xccdf.report.html

I hope this helps.

Best regards

Jan Černý
Security Technologies | Red Hat, Inc.

----- Original Message -----
> From: "Rocio Romero" <[email protected]>
> To: [email protected]
> Sent: Thursday, June 30, 2016 9:50:34 PM
> Subject: [Open-scap] Informational value
> 
> Hi everyone,
> 
> I was taking a look to the possibles values we can get from a check in this
> webpage
> https://sadocs.emc.com/0_en-us/089_105InfCtr/215_SysAdm/ConfigurSTIG/30_OpenSCAPRpt
> .
> 
> I saw that “Informational” is a valid value. Could you please give me an
> example of this?
> 
> Also, I was wondering if there is any way to return some output from a check
> and put this output in the report (a friend ask me about that and I’m not
> sure 100%).
> 
> Thank you so much,
> 
> Rocio
> 
> _______________________________________________
> Open-scap-list mailing list
> [email protected]
> https://www.redhat.com/mailman/listinfo/open-scap-list

_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to