Hello Martin,
----- Original Message -----
From: "Simon Lukasik" <slukasik(a)redhat.com>
To: "Martin Preisler" <mpreisle(a)redhat.com>, open-scap-list(a)redhat.com,
scap-security-guide(a)lists.fedorahosted.org
Sent: Thursday, July 17, 2014 8:59:58 PM
Subject: Re: [Open-scap] openscap HTML report redesign
On 07/17/2014 08:33 PM, Martin Preisler wrote:
> ----- Original Message -----
>> From: "Martin Preisler" <mpreisle(a)redhat.com>
>> To: "open-scap-list" <open-scap-list(a)redhat.com>, "SCAP
Security Guide"
>> <scap-security-guide(a)lists.fedorahosted.org>,
>> scap-workbench(a)lists.fedorahosted.org
>> Sent: Friday, July 11, 2014 4:09:33 PM
>> Subject: openscap HTML report redesign
>>
>> Hi,
>> I wrote a blog post about the ongoing HTML report redesign.
>>
>>
http://martin.preisler.me/2014/07/openscap-html-report-redesign/
>>
>> Please give it a look and consider providing feedback.
>
> A new blog post with more progress on the HTML report redesign. Things are
> shaping up in rule overview, I will focus on result details next.
>
>
http://martin.preisler.me/2014/07/openscap-html-report-redesign-part-2/
>
> I humbly ask for more feedback :-)
>
Hello Martin,
The new report is wonderful.
I noticed that the report reads:
Unauthenticated and unprivileged user root (...)
this wording really feels scary. Sure, I know you are only presenting
data from xccdf:TestResult. Sure, I know that these 'unauthenticated',
'unprivileged' have a special meaning in terms of XCCDF standard.
Nevertheless this language is scary.
OpenSCAP never authenticates user. OpenSCAP never grants any new
privileges to the user. Hence, OpenSCAP will always say:
'unauthenticated' and 'unprivileged'. Would you consider to wipe these
adjectives off?
Many thanks!
As already shared via IRC generally the report looks very nice. Just +1
to Simon's request, plus one small request related with first image too --
there's is note "Profile was selected." Assuming the intention was to list
concrete profile name here (e.g. Profile my_tailored_profile was selected).
Probably just question of not enough time to implement it, but would be nice
to see concrete profile name there.
Plus one reaction wrt to the search window / image - you search for "RPM"
substring. Could you describe the behaviour? Does it finds the first rule
having the substring? After pressing next, would it move to next occurrence?
Is there such "Next" button? (yet maybe providing capability to support
searches:
* to the bottom of the page,
* to the top of the page
under assumption the currently selected rule would be the starting point for
the search might be handy to have too).
Thank you && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team
--
Simon Lukasik
Security Technologies, Red Hat, Inc.
_______________________________________________
Open-scap-list mailing list
Open-scap-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list