Matus Marhefka comments

Results 14 comments of


                                            Matus Marhefka

RHEL 8/9 - `configure_usbguard_auditbackend` results in `notapplicable` and in final scan in `fail`

Closing, reported an issue in openscap - https://github.com/OpenSCAP/openscap/issues/1880

Rule postfix_prevent_unrestricted_relay fails on STIG profile

Closing, reported an issue in openscap - https://github.com/OpenSCAP/openscap/issues/1880

Some PAM rules `pass` during remediation, but then they `fail` during final scan

Closing, reported an issue in openscap - https://github.com/OpenSCAP/openscap/issues/1880

configure_bashrc_exec_tmux failing after remediation

Closing, reported an issue in openscap - https://github.com/OpenSCAP/openscap/issues/1880

Test scenario `missing_blacklist.fail.sh` fails for kernel_module_dccp_disabled

Rule `kernel_module_bluetooth_disabled` also fails with the `missing_blacklist.fail.sh` test scenario on RHEL9 with the `scap-security-guide-0.1.63-4.el9.noarch` package: ``` INFO - xccdf_org.ssgproject.content_rule_kernel_module_bluetooth_disabled ERROR - Script missing_blacklist.fail.sh using profile (all) found issue: ERROR -...

remote scan failed (from centos to centos)

@GhostRock37 Please check https://github.com/OpenSCAP/scap-workbench/issues/237#issuecomment-584180849, it might be the cause of your issue.

Remote SSH scans doesn't work

@bit-sorcerer @redhatrises It seems that `scap-workbench` does not work with display `:1`, I suspect there is display number `:0` hardcoded in the code. If you are performing the scan through...

openscap container image: provide option for user to find out what datastreams and profiles are supported

I can think of two solutions for this issue: - Update `atomic help` command to print all supported datastreams and profiles. - Change the default behavior that configuration compliance scan...

openscap container image: provide option for user to find out what datastreams and profiles are supported

@jan-cerny I like the idea with table.

Remove obsolete cve_scanner package

@jan-cerny Is `atomic scan` using `oscapd-cli` in any way? I think it uses `oscapd-evaluate`.