Hi, The datastream you mentioned looks like it references another file. But in fact, this is a reference to another part of the datastream, 'extended-component'. There can be multiple reasons for this issue. Could you check you can write to /tmp? Could you run the command with --verbose INFO ?
Jan Černý Security Technologies | Red Hat, Inc. ----- Original Message ----- > From: "Šimon Lukašík" <sluka...@redhat.com> > To: "Krishna Mannem" <kman...@pivotal.io>, open-scap-list@redhat.com > Sent: Thursday, November 9, 2017 11:13:19 AM > Subject: Re: [Open-scap] SCE not able to find sh script > > On 10/24/2017 11:38 PM, Krishna Mannem wrote: > > Hi, > > > > We have built openscap for ubuntu 14.04 with --enable-sce. We are trying > > to run a sample test where oscap can check using a bash script. We tried > > to run one of the test files from the openscap repo > > https://github.com/OpenSCAP/openscap/blob/3f74bdc3c133e44bff6eb154731ca771b3e8e8e2/tests/sce/test_sce_in_ds.xml > > > > We are encountering this error: > > SCE couldn't find script file > > 'services/obsolete/disable_nfs_exports.sh'. Expected location: > > '/tmp/oscap.rOXJ8X/xccdf.xml/services/obsolete/disable_nfs_exports.sh'. > > [sce_engine.c:368] > > > > Why is it trying to look in a tmp dir? Under the Usage section on > > https://www.open-scap.org/features/other-standards/sce/ it states that > > oscap will look relative for the script relative to the xccdf file or > > from an absolute path but we tried both with no luck. > > > > > > Hiya, > > The documentation you cite is correct for the low-level layer (SCE) > > Yours, test_sce_in_ds.xml is datastream file and that adds one more > layer on top of this. The DataStream may contain all the needed assets > in a single XML file. During the scan OpenSCAP unpacks the assets for > SCE to the temp files. > > You will perhaps need to debug which part fails and why. > ~š. > > _______________________________________________ > Open-scap-list mailing list > Open-scap-list@redhat.com > https://www.redhat.com/mailman/listinfo/open-scap-list _______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list
