[Open-scap] Guide generation with extended profiles does not include rules

Sven Vermeulen sven.vermeulen at siphos.be
Thu Sep 3 18:05:01 UTC 2015


Hi all

I have an XCCDF document that uses profile extensions [1]. While
building the guide from the XCCDF with a profile, I noticed that the
resulting guide only talks about the rules that are directly assigned
to that profile, and not the rules of the extended profile (i.e. the
rules that that profile should inherit).

This is only on the generation of the guide - evaluating the XCCDF
with the same profile does have those rules tested.

This is with both the 1.2.5 release as well as latest in git
(7a183c462e9c528584d4fe6cf049fdc727d87abc currently).

Wkr,
  Sven Vermeulen

[1] http://dev.gentoo.org/~swift/docs/security_benchmarks/gentoo-xccdf.txt




More information about the Open-scap-list mailing list