I've got a problem on some xccdf files I've built from the github
source.  Eval works fine but when I run with remediation it pauses for
a moment after the "starting remediation" line and then just ends.
If I edit the XCCDF file and remove the `platform="blah"` option from
the <fix..> definition remediation will proceed and will fix any
issues.  I have shown this on Centos7 and RHEL7 with the same results.
I have tested with both the oscap RPM and freshly compiled oscap from
github.

My questions are:
  - How does oscap get the system information to compare to the CPE dictionary?
  - Is there a way to run a command that shows what my system is reporting?
  - What is the correct way to fix this? As opposed to just using sed
to remove platform=.. from all fix definitions

Thank you for any assistance,
Peter

_______________________________________________
Open-scap-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to