----- Original Message -----
> From: "Wei Chen (Contractor)(CFPB)" <wei.c...@cfpb.gov>
> To: mprei...@redhat.com
> Cc: scap-security-guide@lists.fedorahosted.org
> Sent: Friday, August 29, 2014 3:04:23 PM
> Subject: RE: New report and guide in openscap 1.1.0
> 
> Couple comments on the report layout.

Thanks for your feedback!

> 
> •       Rules result breakdown - while the color bar breakdown is nice, it
> doesn't present precise information at first glance.  The user will see 86
> passed, 131 failed, and left guessing what that remaining 6 rules are.
> It'll be nice to see the total number of rules as well.

I decided to add @title which provides a tooltip. If you hover your mouse
over the progress bar you will get a description what it is and how many rules
are there in total.

See 0fab43d278d10bf260314acea11ec7afd3409dbd

> •       Failed rules by severity breakdown – similar to rules results, the
> severity description got cut off even though it’s easy to assume that the
> two failed rules refer to High severity.

Same as above. See a6b216144500bf147eeab2d5152329505ec8ba8f

> •       Score – it’ll be nice to have a brief explanation or reference to how
> the scoring is done for those not familiar with the scoring system.

I simply don't have this info in the report. All info I have is the following:

<score system="urn:xccdf:scoring:default" maximum="100.000000">58.458904</score>

While I could add a link to the specification I think it's not necessary,
do you agree?

I added a tooltip that hints to look at XCCDF specification, see
1d7b370c3194a9103e3d4c95aa5d0dbd3d011dd9

> •       Section heading – I think the number of “not checked” should also be
> included in the section heading along with fail and unknown.  For example, I
> could’ve easily missed “Ensure Software Patches Installed” since it was
> collapsed within Updating Software section.

Are you sure you mean "notchecked" and not "notselected". We already show 
notchecked
rules by default. Either way I am not sure you mean, sorry.

-- 
Martin Preisler
-- 
SCAP Security Guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/

Reply via email to