openscap

openscap copied to clipboard

oscap 1.2.16 ubuntu 20.04 and 18.04 error validate service enable and run auditd, rsyslog, cron and systemd-timesyncd

4

#### Description of Problem: reviewing the execution of the review process with XCCDF our recently installed Ubuntu 20.04 and 18.04 servers we identified that the probe_systemdunitproperty validation process fails when...

rudy500

oscap xccdf generate report errors for STIG Ansible Role XCCDF output

1

#### Description of Problem: How do I view the results of a DISA Ansible Role XCCDF output with oscap? [Red Hat Enterprise Linux 8 STIG for Ansible - Ver 1,...

brsolomon-deloitte

#### Description Add an option in OpenSCAP that allow to evaluate rules based on their references. For example: RHEL STIG id in rules is put as a reference such as:...

ggbecker

Add Service Probe for Windows

6

Creation of a new probe for OVAL service_test for Windows systems. The probe use Windows API to reach services information. Configuration used : - Dev OS : Windows 10 Pro...

OSCAPC

Add process58_probe for Windows

2

Creation of a new probe for OVAL process_test for Windows systems. The probe use Windows API, CreateToolhelp32Snapshot and NT API to reach process informations. Configuration used : Dev OS :...

OSCAPC

OVAL microsoft_windows_server_2019 Datacenter

2

oval eval --results report.xml --report report.html microsoft_windows_server_2019.xml Download from: https://oval.cisecurity.org/repository/download/5.11.2/vulnerability/microsoft_windows_server_2019.xml `File 'microsoft_windows_server_2019.xml' line 65535: Element '{http://oval.mitre.org/XMLSchema/oval-definitions-5#windows}product_version', attribute 'datatype': [facet 'enumeration'] The value 'version' is not an element of the set...

Idriel

"--fetch-remote-resources" kill the process

6

#### Description of Problem: When i use "--fetch-remote-resources" option, at the end the process is killed #### OpenSCAP Version: jumpgm:~ # oscap -V OpenSCAP command line tool (oscap) 1.3.5 Copyright...

gmezzanotti

Allow oscap-podman to run rootless

16

Running oscap-podman as rootless only requires that we run "podman unshare" at key points to change the namespace. Check if we're rootless, and if so, prepend with unshare. This appears...

robbmanes

OpenSCAP could possibly fail to write a verbose message when switching to offline mode

4

We call `dI` after `chroot()` but before calling `chdir("/")`. ``` openscap-1.2.17/src/OVAL/probes/probe/main.c:253: chroot_call: Calling chroot: "chroot(rootdir)". 16. openscap-1.2.17/src/OVAL/probes/probe/main.c:263: chroot: Calling function "__oscap_dlprintf" after chroot() but before calling chdir("/"). # 261| *...

jan-cerny

crashes in pthread_mutex_unlock

5

#### Description of Problem: oscap sometimes crashes randomly due to an abort in `pthread_mutex_unlock`. It happens in multiple XCCDF "unit tests" when they run command `oscap xccdf eval --remediate`. ####...

jan-cerny