openscap icon indicating copy to clipboard operation
openscap copied to clipboard

NIST Certified SCAP 1.2 toolkit

Results 185 openscap issues
Sort by recently updated
recently updated
newest added

On RHEL 10, the augenrules.service unit no longer exists — it has been replaced by audit-rules.service. The current pattern (ExecStartPost=\-\/sbin\/augenrules.*$\|Requires=augenrules.service) causes a false negative when evaluating the ANSSI-BP-028 Enhanced profile....

A few fixes for #2257

I'm trying to generate a fix based on a tailored arf results file, but it doesn't pass the validation. Steps to reproduce: ```bash $ oscap --version OpenSCAP command line tool...

The results of the static analyzer [Svace](https://www.ispras.ru/en/technologies/svace/) are listed below: DEREF_AFTER_NULL: After having been compared to a NULL value at https://github.com/OpenSCAP/openscap/blob/7373845aaecdd9274a1630fb54f26612b5c37fda/src/OVAL/probes/unix/xinetd_probe.c#L1097 pointer 'scur->protocol' is dereferenced at https://github.com/OpenSCAP/openscap/blob/7373845aaecdd9274a1630fb54f26612b5c37fda/src/OVAL/probes/unix/xinetd_probe.c#L1144 by calling function...

On debian systems, some packages provides equivalent functions. For example, syslog can be provided by onte of the following packages: - syslog-ng-core - socklog-run - rsyslog - inetutils-syslogd - busybox-syslogd...

bug
portability