Hi, When performing a xccdf scan of Centos 7 I am finding the report of auditd rule entries inconsistent with how the file is configured.
The following is reported as a fail, yet its an exact match for the scap report entry: https://i.imgur.com/m1q7CLf.png The following is a pass: https://i.imgur.com/LqDiRPO.png My command: # oscap xccdf eval --profile common --report ~/report-xccdf.html --results ~/results.xml --cpe /usr/share/xml/scap/ssg/content/ssg-rhel7-cpe-dictionary.xml /usr/share/xml/scap/ssg/content/ssg-centos7-xccdf.xml Should I raise this as a bug? Regards, Luke
_______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
