Re: [Open-scap] filter not working for file_object

2016-04-20 Thread William Munyan
Hi Pravin, When you eliminate the filter and receive a listing of files shown below: I can confirm that there are suid files in /bin. /bin/eject /bin/su /bin/umount /bin/mount /bin/ping /bin/ping6 You confirm that those are all suid files. Your filter is testing for files which are BOTH suid

Re: [Open-scap] When to expect OVAL probes for OpenShift?

2019-02-04 Thread William Munyan
Hey Shawn, I’ll add to Steve’s point that if there is not current OVAL support for the constructs you need, then the new OVAL tests/objects/states/items would need to be created in either a new OVAL schema or (more likely) as additions to the existing Linux schema. Once created a proposal can

Re: [Open-scap] Trouble Scanning OVAL from CIS Repository

2019-08-15 Thread William Munyan
Those extensions are only in the CIS benchmark content and not part of the OVAL repository. I plan on taking a look at the specific content mentioned in the thread to see what I can see. Cheers Bill M (CIS) Get Outlook for iOS On Thu, Aug 15, 2019 at 7:49 AM -0400,

Re: [Open-scap] Trouble Scanning OVAL from CIS Repository

2019-08-15 Thread William Munyan
Tim, I guess the first thing I would ask is why you’re downloading the full OVAL XML file. That file, as you can see is huge, and contains ALL the definitions in the entire repository. I can make an educated guess that your Fedora-based system doesn’t need to assess against every Windows