openscap
openscap copied to clipboard
OpenSCAP
NIST Certified SCAP 1.2 toolkit
### Wrong spelling (case) for accesstoken_item attributes sedenybatchlogonright and sedenyremoteinteractivelogonright according to schema (xsd) documentation. Bug https://github.com/OpenSCAP/openscap/blob/maint-1.3/src/OVAL/probes/windows/accesstoken_probe.c Line 503 ```c for (int i = 0; i < OVAL_PRIVILEGES_COUNT; i++) {...
#### **Description of Problem**: I am trying to create a custom profile of DISA STIG for Red Hat Enterprise Linux 8. I am doing that in scap workbench->load content(Rhel8)->profile(DISA STIG...
Hello, I'm trying to verify STIG compliance on a brand new W2019 core server (not in the domain) using oscap.exe 1.3.0/1.3.4/1.3.5, and i get a lot of "skipping rule that...
#### Description of Problem: Currently OpenScap doesnt support current oval definition probes and / or custom definitions. For example I would like to make an OVAL definition that leverages SSDEEP...
- Is this an issue with SCAP Workbench? - If so, report it here: https://github.com/OpenSCAP/scap-workbench/issues - Is this an issue with SCAP Security Guide (i.e., related to the content of...
#### Description of Problem: As described in the [ComplianceAsCode SCE pull request](https://github.com/ComplianceAsCode/content/pull/7075#issuecomment-875438084), we'd like to see multiple SCE scripts combined into a single `extended-components` with multiple `script` sub-elements. Suggested by...
#### Description of Problem: When [adding SCE support in ComplianceAsCode](https://github.com/ComplianceAsCode/content/pull/7075#discussion_r664664758), @yuumasato noticed that the final datastream has a non-compliant `` element with non-empty body (see linked comment). This appears to...
Related to #1781, specifically: https://github.com/OpenSCAP/openscap/pull/1781#discussion_r670229692 We can't really do that in a patch version update. So, this is a reminder for minor version.
