On 8/29/13 9:16 PM, Jeffrey Blank wrote:
As promised, here is a display of the OVAL testing progress on scap-security-guide, against the Rules for the STIG profile: http://scap-securityguide.rhcloud.com/RHEL6/output/table-stig-rhel6-testinfo...
A very fat green bar in the "Check Text" column indicates that both OVAL and XCCDF have been tested; a note with the testers' names/initials are displayed at the bottom of the associated cell.
How check attestations are added to the project are covered in previous discussions on the list (and hopefully apparent at a glance in the corresponding input file).
Nice, thanks!
The number of tested checks could increase significantly (momentum!), if some of the templated ones are tested (which would then likely involve adding a tag to the template, at least for the OVAL).
Just submitted a few patches against the OVAL templates.... hope to do more in the coming days.
Relatedly, I seem to recall that one of the templated OVAL checks may not quite be right, such as enabling/disabling a service for all runlevels instead of the usual 2-5.
Correct... that one will need both the OVAL and bash updated. I'll take this one over the weekend (unless someone can beat me to it!).