[Open-scap] help needed: Can't connect to the probe

[Pierre Chifflier]

Hi folks,

I'm trying to test the oscap_cli interpreter with the Debian probe (up
to date git ffba0aa59f3befda1c7530c5211945642d47b72a).
My goal is to be able to run a set of tests on a Debian system.

When testing the XML file from
http://oval.mitre.org/repository/data/ViewDefinition?id=oval%3aorg.mitre.oval%3adef%3a6513

This is an information probe, which (AFAICT) just tests for the
presence of file /etc/debian_version

Short version:

The output of the command is the following:
./oscap_cli -vv /var/tmp/oval-2010-02-23.06.11.40.xml
[...]
Evaluating definition: Debian 5.0 is installed
Probing object (oval:org.mitre.oval:obj:7326)
WARNING: Syschar for object (oval:org.mitre.oval:tst:11150 148231784) is
not available
Error: (257) Can't connect to the probe
THERE ARE 0 SYSCHARS

Longer version:
strace -f -etrace=file ./oscap_cli -vv /var/tmp/oval-2010-02-23.06.11.40.xml
[...]
Evaluating definition: Debian 5.0 is installed
Probing object (oval:org.mitre.oval:obj:7326)
[pid 15622] stat64("/usr/local/libexec/openscap/(null)", 0xbff7272c) = -1 ENOENT (No such file or directory)
[pid 15622] stat64("/usr/local/libexec/openscap/(null)", 0xbff7272c) = -1 ENOENT (No such file or directory)
[pid 15622] stat64("/usr/local/libexec/openscap/(null)", 0xbff7272c) = -1 ENOENT (No such file or directory)
[pid 15622] stat64("/usr/local/libexec/openscap/(null)", 0xbff7272c) = -1 ENOENT (No such file or directory)
WARNING: Syschar for object (oval:org.mitre.oval:tst:11150 143980136) is not available
Error: (257) Can't connect to the probe
THERE ARE 0 SYSCHARS


I'm not sure, but it seems the probe for <textfilecontent_test> is not
implemented. Is it correct ?

If you need anything just tell me.

I've attached the test file and the results to this message.

Note: the comparison should be false, since I'm using sid (unstable)
version of Debian.
$ cat /etc/debian_version
squeeze/sid

Best regards,
Pierre

-------------- next part --------------
A non-text attachment was scrubbed...
Name: oval-2010-02-23.06.11.40.xml
Type: application/xml
Size: 2906 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20100223/119ac844/attachment.wsdl>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: oval-2010-02-23.06.11.40.xml.results.xml
Type: application/xml
Size: 4492 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20100223/119ac844/attachment-0001.wsdl>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: oval-2010-02-23.06.11.40.xml.syschar.xml
Type: application/xml
Size: 1408 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20100223/119ac844/attachment-0002.wsdl>