Jan Černý

ABI compliance checker thinks that C is C++

4

Hello, I have been using abi-compliance-checker for a long time to check API/ABI compatibility while making an upstream releases of OpenSCAP. However after I upgraded to Fedora 26, abi-compliance-checker stopped...

Rule sysctl_net_ipv4_conf_all_forwarding fails after Ansible remediation

9

#### Description of problem: Rule sysctl_net_ipv4_conf_all_forwarding fails after Ansible remediation in the xccdf_org.ssgproject.content_profile_stig_gui profile Ansible remediation test. #### SCAP Security Guide Version: current upstream as of 2022-08-06 as of HEAD...

Generate per profile testinfo tables from XCCDF 1.2

2

#### Description: This commit changes the `table-${PRODUCT}-${STIG_PROFILE}-testinfo.html` files generator to use the `ssg-${PRODUCT}-xccdf-1.2.xml` instead of `ssg-${PRODUCT}-xccdf.xml` as an input. #### Rationale: This reduces our dependency on XCCDF 1.1 so it...

Test missing references in a data stream

7

#### Description: Update `profile_tool.py` to support also SCAP source data streams and change upstream test `missing-references` to consume data stream. For more details, please read commit message of every commit....

Use XCCDF 1.2 to generate STIG HTML table

2

#### Description: We will use `ssg-${PRODUCT}-xccdf-1.2.xml` to generate `table-${PRODUCT}-stig.html`. Note that the `stig_overlay.xml` file remains in the XCCDF 1.1 namespace, but the temporary internal file `unlinked-stig-xccdf.xml` will now be in...

Refactor templated test scenarios

4

#### Description: This PR refactors handling of templated test scenarios so that only the templated test scenarios that will be used will be loaded. For more information, please read commit...

Test nullok_commented.pass.sh fails

2

#### Description of problem: Test nullok_commented.pass.sh fails in Automatúš's combined mode with OSPP and PCI-DSS profiles on RHEL 7. It fails both Ansible and Bash remediation runs. #### SCAP Security...

#### Description of problem: Rule enable_fips_mode on RHEL 8 checks if the kernel boot parameter is configured for FIPS mode as a part of the OVAL check, but it checks...

Rule sysctl_kernel_yama_ptrace_scope is misaligned with DISA

1

#### Description of problem: Rule xccdf_org.ssgproject.content_rule_sysctl_kernel_yama_ptrace_scope is misaligned with rule xccdf_mil.disa.stig_rule_SV-230546r833361_rule from the DISA content in disa-stig-rhel8-v1r6-xccdf-scap.xml #### SCAP Security Guide Version: current upstream as of 2022-08-06 as of HEAD...

Rule sysctl_kernel_core_pattern is misaligned with DISA

2

#### Description of problem: Rule xccdf_org.ssgproject.content_rule_sysctl_kernel_core_pattern is misaligned with rule xccdf_mil.disa.stig_rule_SV-230311r833305_rule from the DISA content in disa-stig-rhel8-v1r6-xccdf-scap.xml. #### SCAP Security Guide Version: current upstream as of 2022-08-06 as of HEAD...