On 07/17/2014 08:33 PM, Martin Preisler wrote:
> ----- Original Message -----
>> From: "Martin Preisler" <mpreisle(a)redhat.com>
>> To: "open-scap-list" <open-scap-list(a)redhat.com>, "SCAP
Security
>> Guide" <scap-security-guide(a)lists.fedorahosted.org>,
>> scap-workbench(a)lists.fedorahosted.org
>> Sent: Friday, July 11, 2014 4:09:33 PM
>> Subject: openscap HTML report redesign
>>
>> Hi,
>> I wrote a blog post about the ongoing HTML report redesign.
>>
>>
http://martin.preisler.me/2014/07/openscap-html-report-redesign/
>>
>> Please give it a look and consider providing feedback.
>
> A new blog post with more progress on the HTML report redesign.
> Things are shaping up in rule overview, I will focus on result
> details next.
>
>
http://martin.preisler.me/2014/07/openscap-html-report-redesign-part-2/
>
> I humbly ask for more feedback :-)
>
Hello Martin,
The new report is wonderful.
I noticed that the report reads:
Unauthenticated and unprivileged user root (...)
this wording really feels scary. Sure, I know you are only presenting
data from xccdf:TestResult. Sure, I know that these 'unauthenticated',
'unprivileged' have a special meaning in terms of XCCDF standard.
Nevertheless this language is scary.
OpenSCAP never authenticates user. OpenSCAP never grants any new
privileges to the user. Hence, OpenSCAP will always say:
'unauthenticated' and 'unprivileged'. Would you consider to wipe these
adjectives off?
Many thanks!
+1 to this. These terms have special meaning in government circles as
well.
The screen shots a really great. Would it be possible to post an HTML
output somewhere so we could "experience" the page as well?