Hi Martin,

> > The report is generated from both the XCCDF results and OVAL results
> > documents
> > using XSLT templates and transformations. The XSLT just parses the XML
> > document
> > and converts it into a nicely formated document.
> 
> This is a long standing issue. We recommend using ARF (--results-arf) to
> mitigate it. OVAL details are always generated if the user is using ARF
> results instead of the plain XCCDF results.

I'm afraid it doesn't work like that now. With ARF you also must add 
--oval-results
to show the details in the HTML report.

Try e.g.
oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common 
--results-arf arf.xml --report report1.html 
/usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml
vs.
oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common 
--results-arf arf.xml --report report2.html --oval-results 
/usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml
And you will see that report1.html doesn't contain the details because 
--oval-results was not specified.

But I also expected that it works always. I think it should be changed in a way 
you suggested.
Then we could recommend users to use ARFs always and simplify a lot of commands
in our user manual and tutorials.


Best regards

Jan Černý
Security Technologies | Red Hat, Inc.

_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to