Re: [Open-scap] RHEL 7 GRUB2 boot password

2018-01-24 Thread Dan White
"superusers should be root, admin or administrator" Are you sure it shouldn't be "superusers should NOT be root, admin or administrator" ? I changed mine from "root" to "grub.root", made sure the full hash was in /etc/grub.d/01_users, re-ran grub2-mkconfig  and then the oscap scan passed.

Re: [Open-scap] Open SCAP on Ubuntu

2018-01-24 Thread Jan Cerny
Hi, Unfortunately, scap-workbench was introduced in Ubuntu 17.04, so it is not available in 16.04. In ubuntu 16.04 you can use still command-line tool oscap, which is found in package libopenscap8. But there is old OpenSCAP 1.2.8. I don't expect Ubuntu people will update packages in LTS release

Re: [Open-scap] Open SCAP on Ubuntu

2018-01-24 Thread Gary Gapinski
On 01/24/2018 03:04 PM, Geoffry Roberts wrote: All, Can anyone give me the status of OpenSCAP on Ubuntu? Is it healthy? I am using Ubuntu

[Open-scap] Open SCAP on Ubuntu

2018-01-24 Thread Geoffry Roberts
All, Can anyone give me the status of OpenSCAP on Ubuntu? Is it healthy? I am using Ubuntu because I can't get Fedora 27 Workstation to install on my vbox, an issue I'll be posting to the Fedora forum. I am just getting started with OpenSCAP. According to the users manual I should be able to in

Re: [Open-scap] RHEL 7 GRUB2 boot password

2018-01-24 Thread Dan White
Escalating it ! https://access.redhat.com/support/cases/#/case/02019325 Dan White | d_e_wh...@icloud.com “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried to contact us.”  (B

Re: [Open-scap] RHEL 6 - rsyslog vs rsyslog7

2018-01-24 Thread Dan White
In RHEL 6, yes In RHEL 7, they are already on rsyslog 8 Can the check look for either ? Dan White | d_e_wh...@icloud.com “Sometimes I think the surest sign that intelligent life exists elsewhere in the universe is that none of it has tried t

Re: [Open-scap] RHEL 6 - rsyslog vs rsyslog7

2018-01-24 Thread Watson Yuuma Sato
On 23/01/18 13:42, Dan White wrote: Another head-scratcher: RHEL 6 scan brings up findings saying rsyslog is not installed or configured. We are using the rsyslog7 package for compatibility with things like Splunk and LogStash and such. Is there a workaround or should I create a bug/issue ab

Re: [Open-scap] RHEL 7 GRUB2 boot password

2018-01-24 Thread Watson Yuuma Sato
On 23/01/18 20:56, Dan White wrote: Something is very wrong here [root@jump-linux7 ~]# cat /etc/grub.d/01_users # ORIGINAL #!/bin/sh -e cat << EOF if [ -f \${prefix}/user.cfg ]; then   source \${prefix}/user.cfg   if [ -n "\${GRUB2_PASSWORD}" ]; then     set superusers="root"     export superuse