[Open-scap] Possible OpenSCAP bug

Dragos Prisaca dragos.prisaca at g2-inc.com
Thu Mar 2 19:04:56 UTC 2017


Hello,

It looks like OpenSCAP 1.2.10 does not process correctly the following
object which uses @recurse="none":
        <unix:file_object id="oval:nist.validation.macosFileTest:obj:177"
xmlns:unix="http://oval.mitre.org/XMLSchema/oval-definitions-5#unix"
comment="@recurse='none'" version="1">
          <unix:behaviors max_depth="-1" recurse_file_system="local"
recurse="none" recurse_direction="down"/>
          <unix:path operation="equals"
datatype="string">/scapVal/File-Test-Level2/Level3-Folder010</unix:path>
          <unix:filename operation="pattern match">.+</unix:filename>
        </unix:file_object>

Since there is a file
(/scapVal/File-Test-Level2/Level3-Folder010/Level3-File010.txt), the
expectation is to collect the following item:
<unix-sys:file_item id="12884417" status="exists">
    <unix-sys:filepath>/scapVal/File-Test-Level2/Level3-Folder010/Level3-File010.txt</unix-sys:filepath>
    <unix-sys:path>/scapVal/File-Test-Level2/Level3-Folder010</unix-sys:path>
    <unix-sys:filename>Level3-File010.txt</unix-sys:filename>
    <unix-sys:type>regular</unix-sys:type>
    ...
</unix-sys:file_item>

Please let me know if you have any questions.

Respectfully,
_Dragos.




More information about the Open-scap-list mailing list