<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 07/04/17 07:17, Shawn Wells wrote:<br>
</div>
<blockquote
cite="mid:0233c56f-eb51-81cd-0988-78cb8e4dcbe5@redhat.com"
type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<br>
<br>
<div class="moz-cite-prefix">On 4/6/17 11:10 AM, Przemek Klosowski
wrote:<br>
</div>
<blockquote
cite="mid:fe306523-5d54-f2f2-02c4-95c9f34c7c1d@nist.gov"
type="cite">
<div class="moz-text-html" lang="x-unicode">
<p>On a fresh-out-of-the-box+updated RHEL7 (with
openscap-scanner-1.2.10-3.el7_3.x86_64)<br>
</p>
<blockquote>
<p>oscap xccdf eval --profile
xccdf_org.ssgproject.content_profile_common --report
/tmp/report.html
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml<br>
This content points out to the remote resources. Use
`--fetch-remote-resources' option to download them.<br>
WARNING: Skipping <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>
file which is referenced from XCCDF content</p>
</blockquote>
<p>The scan goes off/generates reports, but in order to heed
the the WARNING, I try to get the latest remote OVAL file <br>
</p>
<blockquote>
<p>oscap xccdf eval --fetch-remote-resources --profile
xccdf_org.ssgproject.content_profile_common --report
/tmp/report-remote.html
/usr/share/xml/scap/ssg/content/ssg-rhel7-ds.xml<br>
Downloading: <a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>
... ok<br>
OpenSCAP Error: Unable to parse XML from user memory
buffer [oscap_source.c:254]<br>
Failed to create OVAL definition model from: '<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>'.
[xccdf_session.c:787]<br>
</p>
</blockquote>
<p>and the scan terminates. Is that a problem with the remote
file (Red_Hat_Enterprise_Linux_7.xml) or an 'oscap' bug?<br>
</p>
</div>
</blockquote>
<br>
I get the exact same error - looks like a bug<br>
<br>
$ cat /etc/redhat-release ; uname -a ; rpm -qv openscap-scanner ;
free -m<br>
Red Hat Enterprise Linux Server release 7.3 (Maipo)<br>
Linux devbox 3.10.0-514.10.2.el7.x86_64 #1 SMP Mon Feb 20 02:37:52
EST 2017 x86_64 x86_64 x86_64 GNU/Linux<br>
openscap-scanner-1.2.10-3.el7_3.x86_64<br>
</blockquote>
<span class="blob-code-inner"><span class="pl-s"><br>
On SSG version 0.1.31 we switched to URL <a
href="http://www.redhat.com/security/data/oval/com.redhat.rhsa-RHEL7.xml.bz2">http://www.redhat.com/security/data/oval/<span
class="x x-first x-last">com.redhat.rhsa-RHEL7.</span>xml</a><span
class="x x-first x-last"><a
href="http://www.redhat.com/security/data/oval/com.redhat.rhsa-RHEL7.xml.bz2">.bz2</a>,
this one is working fine.<br>
<br>
Don't know why </span></span></span><a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml">http://www.redhat.com/security/data/oval/Red_Hat_Enterprise_Linux_7.xml</a>
would stop working<br>
<blockquote
cite="mid:0233c56f-eb51-81cd-0988-78cb8e4dcbe5@redhat.com"
type="cite"> <br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Open-scap-list mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Open-scap-list@redhat.com">Open-scap-list@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/open-scap-list">https://www.redhat.com/mailman/listinfo/open-scap-list</a></pre>
</blockquote>
<br>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
Watson Sato
Security Technologies | Red Hat, Inc</pre>
</body>
</html>