Re: [Open-scap] Make check errors on SUSE

We would love to accept patches for these issues. Especially for the segfault. However, we are interested also in amending the test suite so it can pass on any Linux system. Best, ~š. On 03/16/2016 11:35 AM, S, Gautam wrote: Hi folks, I am building and trying to test openscap on SLES

Re: [Open-scap] Compile openscap on Solaris 10

On 03/04/2016 10:20 AM, Andreas Krause wrote: Hi again, is there any Howto to get openscap compiled on Solaris 10? So far, I managed to run through the configure step using openscap-1.2.5, but with no further success. Thanks in advance! Regards, Andreas I think the Solaris, already ships

Re: [Open-scap] RPM based remediation hangs on SUSE.

Hello Gautam, Firstly, let me just express gratitude for in depth analysis. I applaud to engineering virtue. Well done! I would approach this thing as follows. I would connect with RPM maintainers in SuSE, why it needs to get exclusive lock. I am not equipped to claim which solution (rpm in

Re: [Open-scap] RPM based remediation hangs on SUSE.

On 04/01/2016 05:07 PM, Šimon Lukašík wrote: > Hello Gautam, > > Firstly, let me just express gratitude for in depth analysis. I applaud > to engineering virtue. Well done! > > I would approach this thing as follows. I would connect with RPM > maintainers in SuSE, why it n

Re: [Open-scap] OVAL content authoring tool

Hello Pravin, I advise you what folks working on Debian/ directory has achieved. Most of the checks will be the same for SuSE and Fedora derivatives. A lot is shared with Debian as well. There will be some differences though, like configuration file paths. We try to leverage shared/ directory

[Open-scap] All those beautiful days ...

Hiya, I step aside from lead developer role in the OpenSCAP ecosystem, so I can focus on things under the hood of manageiq.org Just wanted to drop a note that I am changing my mindset towards ecosystem today. I may contribute here and there whenever I enjoy it, however I may not be able to

Re: [Open-scap] Congratulations

On 03/21/2017 08:47 AM, Gary Gapinski wrote: > for the most recent NIST certification > . > Quite an achievement, and nice to have it extended to RHEL7. > Congratulation! Well done! Thanks!

Re: [Open-scap] OpenSCAP support to Solaris and FreeBSD

On 07/20/2017 10:22 AM, Jan Cerny wrote: > Hi, > > 1) FreeBSD - They use a specific format, called VuXML. > We don't have support for that now. That would require to > implement parsing, evaluating and reporting in VuXML format > and also a probe to scan FreeBSD Ports. That wouldn't be a small

Re: [Open-scap] [Suspected Spam] Re: OSCAP Scanner Binaries

On 04/27/2018 07:18 AM, Mohanraj, Bharath wrote: > Thanks Shawn for the clarification… > >   > > One last thing I want to mention here is… some of the RHEL boxes in my > environment are locked down from internet.. .so they will not have > access to the repository to fetch oscap binaries, and

Re: [Open-scap] Using authconfig rather than hand editing files

On 05/25/2018 11:06 PM, Dan White wrote: I just messed up a baker’s dozen of RHEL 6 virtual machines by hand editing /etc/pam.d files system-auth-ac and password-auth-ac I was able to un-mess 8 of them with an authconfig command. The other 5 are in various stages of recovery. One had a

Re: [Open-scap] OSCAP Platform Support

On 07/02/2018 03:17 PM, Mohanraj, Bharath wrote: Hi All, Can someone please help me with details on OSCAP support for other platforms? In addition to Linux flavors, are we planning to support other platforms? I know, there is some work going on for supporting Windows. I’m especially looking

Re: [Open-scap] oscap results stored in central database?

Hello, As original author of SCAPtimony, I feel urged to come in and say here is my $0.02 coin. After spending some time on OpenSCAP development, I started wondering where all the results of the scans go. I thought there has to be immense need to make sense of the data organizations have and

Re: [Open-scap] oscap results stored in central database?

ings). Cheers, ~š. > But I would be interested to hear your thoughts on this.  > > > > > --- > Luke Salsich > > On Fri, Feb 2, 2018 at 8:21 AM, Šimon Lukašík <sluka...@redhat.com > <mailto:sluka...@redhat.com>> wrote: > >

[Open-scap] https://www.open-scap.org/ down?

Can you guys please take a look? ~š. ___ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list

Re: [Open-scap] Not able to make SCE script working

On 04/25/2018 09:47 AM, Raymond Mercier wrote: > severity="medium"> > selinux > Checks if you have > SELinux enabled >

Re: [Open-scap] Not able to make SCE script working

p.3sSrgD/ and executes the scan. There is no scap_1402.sh in the xml you provided. Best, ~š. > Same kind of error message if I set absolute path /root/scap_1402.sh > > Thank you for help > Raymond > > > 2018-04-25 10:12 GMT+02:00 Šimon Lukašík

Re: [Open-scap] Not able to make SCE script working

> > 2018-04-25 14:05 GMT+02:00 Šimon Lukašík <sluka...@redhat.com > <mailto:sluka...@redhat.com>>: > > On 04/25/2018 10:24 AM, Raymond Mercier wrote: > > Hi Simon > > > > I updated, the error message is different (but still present)

Re: [Open-scap] anything from stock repo is fair game?

libxml, it will depend on the single version installed by yum. This both reduces install size and maintenance burden. Of course there are exceptions to this rule, but in rare cases where software is ever bundled in rpms is usually temporary and it is known so it can be assessed for. Kind regards,

Re: [Open-scap] Compliance Mapping

, -- Šimon Lukašík Member of technical staff Office of the Chief Technologist Red Hat Public Sector [1]: http://atopathways.redhatgov.io/cac/tables/table-rhel8-srgmap-flat.html [2]: https://github.com/ComplianceAsCode/content Tobias Svenblad writes: > Hello, > > I hope I came to the ri

Re: [Open-scap] '--fetch-remote-resources'

that could be explained better. Kind regards, -- Šimon Lukašík Member of technical staff Office of the Chief Technologist Red Hat Public Sector Yectli Huerta writes: > Hi, > > I get this message from > WARNING: Datastream component 'scap_org.open-scap_cref_security-data-oval-co > m.re

Re: [Open-scap] OpenSCAP Nist Control Coverage

/manual/developer_guide.adoc to build project yourself. Once the build completes, you will need to look into ./build/tables/ directory. The filename should be self-explanatory and you should be able to find what you need there. Kind regards, -- Šimon Lukašík Member of technical staff Office