On 10/24/2017 11:38 PM, Krishna Mannem wrote: > Hi, > > We have built openscap for ubuntu 14.04 with --enable-sce. We are trying > to run a sample test where oscap can check using a bash script. We tried > to run one of the test files from the openscap repo > https://github.com/OpenSCAP/openscap/blob/3f74bdc3c133e44bff6eb154731ca771b3e8e8e2/tests/sce/test_sce_in_ds.xml > > We are encountering this error: > SCE couldn't find script file > 'services/obsolete/disable_nfs_exports.sh'. Expected location: > '/tmp/oscap.rOXJ8X/xccdf.xml/services/obsolete/disable_nfs_exports.sh'. > [sce_engine.c:368] > > Why is it trying to look in a tmp dir? Under the Usage section on > https://www.open-scap.org/features/other-standards/sce/ it states that > oscap will look relative for the script relative to the xccdf file or > from an absolute path but we tried both with no luck. > >
Hiya, The documentation you cite is correct for the low-level layer (SCE) Yours, test_sce_in_ds.xml is datastream file and that adds one more layer on top of this. The DataStream may contain all the needed assets in a single XML file. During the scan OpenSCAP unpacks the assets for SCE to the temp files. You will perhaps need to debug which part fails and why. ~š. _______________________________________________ Open-scap-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/open-scap-list
