Hi, it seems like a bug [1]. I personally don't know about such option to change "/tmp",
but I have tried "oscap ds sds-split" to split simple datastream to multiple files and then I have evaluated exported content and it worked - sce files are not loaded from /tmp, but from target directory of "oscap ds sds-split". [1] https://github.com/OpenSCAP/openscap/issues/528 Zbynek Moravec ----- Original Message ----- > From: "Rocio Romero" <ro...@wazuh.com> > To: open-scap-list@redhat.com > Sent: Tuesday, September 13, 2016 8:06:47 PM > Subject: [Open-scap] Datastream, SCE and tmp folder > > Hi everyone, > > I’ve been working for a while with data streams using SCE in some local > machines. Then I started some testing on prod machines. I started to find > some errors in the results. The errors came from the rules using SCE. > > I used the verbose option to get more information about the errors I was > getting and I discover that the scripts generated on the /tmp folder could > not be executed because of the permissions. I discover that following a CIS > rule, the /tmp folder as the no exec option activated, so it can not be > executed. > > Is there any configuration option in order to change the folder where the > scripts are created when you use a data stream? > > Thank you, > > Rocio > > _______________________________________________ > Open-scap-list mailing list > Open-scap-list@redhat.com > https://www.redhat.com/mailman/listinfo/open-scap-list _______________________________________________ Open-scap-list mailing list Open-scap-list@redhat.com https://www.redhat.com/mailman/listinfo/open-scap-list
