Hi Martin, > > The report is generated from both the XCCDF results and OVAL results > > documents > > using XSLT templates and transformations. The XSLT just parses the XML > > document > > and converts it into a nicely formated document. > > This is a long standing issue. We recommend using ARF (--results-arf) to > mitigate it. OVAL details are always generated if the user is using ARF > results instead of the plain XCCDF results.
I'm afraid it doesn't work like that now. With ARF you also must add --oval-results to show the details in the HTML report. Try e.g. oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common --results-arf arf.xml --report report1.html /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml vs. oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_common --results-arf arf.xml --report report2.html --oval-results /usr/share/xml/scap/ssg/content/ssg-fedora-ds.xml And you will see that report1.html doesn't contain the details because --oval-results was not specified. But I also expected that it works always. I think it should be changed in a way you suggested. Then we could recommend users to use ARFs always and simplify a lot of commands in our user manual and tutorials. Best regards Jan Černý Security Technologies | Red Hat, Inc. _______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
