it seems like a bug . I personally don't know about such option to change
but I have tried "oscap ds sds-split" to split simple datastream to multiple
and then I have evaluated exported content and it worked - sce files are not
from /tmp, but from target directory of "oscap ds sds-split".
----- Original Message -----
> From: "Rocio Romero" <ro...@wazuh.com>
> To: firstname.lastname@example.org
> Sent: Tuesday, September 13, 2016 8:06:47 PM
> Subject: [Open-scap] Datastream, SCE and tmp folder
> Hi everyone,
> I’ve been working for a while with data streams using SCE in some local
> machines. Then I started some testing on prod machines. I started to find
> some errors in the results. The errors came from the rules using SCE.
> I used the verbose option to get more information about the errors I was
> getting and I discover that the scripts generated on the /tmp folder could
> not be executed because of the permissions. I discover that following a CIS
> rule, the /tmp folder as the no exec option activated, so it can not be
> Is there any configuration option in order to change the folder where the
> scripts are created when you use a data stream?
> Thank you,
> Open-scap-list mailing list
Open-scap-list mailing list