[Open-scap] systemdunitproperty_test issue

Shawn Wells shawn at redhat.com
Sun Aug 31 05:39:27 UTC 2014


On 8/30/14, 6:42 AM, Simon Lukasik wrote:
> On 08/29/2014 04:56 AM, Simon Lukasik wrote:
>> Hello Guys,
>>
>> I have messing with systemdunitproperty. I got oscap to the point that
>> it prints out:
>>
>>      Failed to import the OVAL Definitions from
>> 'output/ssg-rhel6-oval.xml'.
>>      OpenSCAP Error: Unable to open file: 'output/ssg-rhel6-oval.xml'
>> [oscapxml.c:573]
>>      No such file or directory 'output/ssg-rhel6-oval.xml'
>> [oval_defModel.c:232]
>
> Och, I've pasted wrong error message. I was nervous about draining
> battery. The error message I saw was:
>
>     Definition oval:ssg:def:743: not evaluated
>     OpenSCAP Error: Probe at sd=4 (systemdunitdependency) reported an
> error: Operation not supported [./oval_probe_ext.c:525]
>     No definition with ID: oval:ssg:def:743 in result model.
> [oval_agent.c:184]
>
> The reproducer remains the same. Thanks!

One step missing from the reproducer... checkout the systemd branch


$ git clone git at github.com:isimluk/scap-security-guide.git systemd
*$ git checkout remotes/origin/systemd*
$ cd systemd/RHEL/6/
$ make content
$ #service_quota_nld_disabled
$ oscap oval eval --skip-valid --id oval:ssg:def:743
output/ssg-rhel6-oval.xml
Failed to import the OVAL Definitions from 'output/ssg-rhel6-oval.xml'.
OpenSCAP Error: Unknown test type oval:ssg:tst:3202. [oval_test.c:369]
$ # service_auditd_enabled
$ oscap oval eval --skip-valid --id oval:ssg:def:973
output/ssg-rhel6-oval.xml
Failed to import the OVAL Definitions from 'output/ssg-rhel6-oval.xml'.
OpenSCAP Error: Unknown test type oval:ssg:tst:3202. [oval_test.c:369]

tst:3202 is below:
>     <linux:systemdunitproperty_test check="all"
> check_existence="any_exist" comment="systemd test"
> id="oval:ssg:tst:3202" version="1">
>       <linux:object object_ref="oval:ssg:obj:3212"/>
>       <linux:state state_ref="oval:ssg:ste:3213"/>
>     </linux:systemdunitproperty_test>

I'm on RHEL 6 / openscap-utils-1.0.8-1.el6_5.x86_64

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/open-scap-list/attachments/20140831/dbc0a99e/attachment.htm>


More information about the Open-scap-list mailing list