[Open-scap] OpenSCAP Error, Missing Library?

[Daniel Kopecek]

Hello,

On 04/19/2013 11:11 AM, Anthony Davis wrote:
> Hi Przemek,
>
> Thanks for the response, but i dont know if strace is outputting anything usefull, here is what I have found:
>
> The rule it hangs on:
> Rule ID:        SV-37379r1_rule
> Title:          All interactive user home directories defined in the /etc/passwd file must exist.
> Result:
>
> strace output:
>
> write(1, "Rule ID:\r\t\t\33[1mSV-37379r1_rule\33["..., 37) = 37
> write(1, "Title:\r\t\tAll interactive user ho"..., 91) = 91
> write(1, "Result:\r\t\t", 10)           = 10
> wait4(13305, 0x7fff2584379c, WNOHANG, NULL) = 0
> writev(5, [{"(#d8:seap.msg#d3::id#d8((#d15:pa"..., 242}], 1) = 242
> wait4(13305, 0x7fff2584369c, WNOHANG, NULL) = 0
> select(6, [5], NULL, NULL, NULL)        = 1 (in [5])
> wait4(13305, 0x7fff2584372c, WNOHANG, NULL) = 0
> read(5, "(#d8:seap.cmd#d3::id#d2#d6::clas"..., 16384) = 104
> wait4(13305, 0x7fff25841ffc, WNOHANG, NULL) = 0
> writev(5, [{"(#d8:seap.msg#d3::id#d9#d8:no-re"..., 234}], 1) = 234
> wait4(13305, 0x7fff25841efc, WNOHANG, NULL) = 0
> select(6, [5], NULL, NULL, NULL)        = 1 (in [5])
> wait4(13305, 0x7fff25841f8c, WNOHANG, NULL) = 0
> read(5, "(#d8:seap.cmd#d3::id#d3#d6::clas"..., 16384) = 100
> wait4(13305, 0x7fff25841f0c, WNOHANG, NULL) = 0
> writev(5, [{"(#d8:seap.cmd#d3::id#d2#d9::repl"..., 276}], 1) = 276
> wait4(13305, 0x7fff25841efc, WNOHANG, NULL) = 0
> select(6, [5], NULL, NULL, NULL)        = 1 (in [5])
> wait4(13305, 0x7fff25841f8c, WNOHANG, NULL) = 0
> read(5, "(#d8:seap.msg#d3::id#d8#d9::repl"..., 16384) = 42
> wait4(13305, 0x7fff258436ac, WNOHANG, NULL) = 0
> writev(5, [{"(#d8:seap.cmd#d3::id#d3#d9::repl"..., 126}], 1) = 126
> wait4(13305, 0x7fff2584369c, WNOHANG, NULL) = 0
> select(6, [5], NULL, NULL, NULL)        = 1 (in [5])
> wait4(13305, 0x7fff2584372c, WNOHANG, NULL) = 0
> read(5, "(#d8:seap.msg#d3::id#d9#d9::repl"..., 16384) = 4025
> wait4(13313, 0x7fff25844b9c, WNOHANG, NULL) = 0
> writev(6, [{"(#d8:seap.msg#d3::id#d47((#d11:f"..., 534}], 1) = 534
> wait4(13313, 0x7fff25844a9c, WNOHANG, NULL) = 0
> select(7, [6], NULL, NULL, NULL
>
> Any insight you guys can give would be really helpful as im not too brilliant at reading the strace output and understanding
does it hang on the last select? If not, then the test probably takes a 
very long time to complete. I'll look at how it is implemented in the
content. Try to run the test again using the following strace command:

  strace -ff -T -o oscap.strace -s 16384

It'll generate a bunch of oscap.strace.<PID> files. Please send all of 
them to us, compressed if possible.

Thanks,
Dan K.