Really like the new feature! One thing is how do I remove a waiver, e.g.
what if I accidentally add a waiver to the wrong rule?
Gabe
On Wed, Nov 12, 2014 at 9:36 AM, Martin Preisler <mpreisle(a)redhat.com>
wrote:
----- Original Message -----
> From: "Shawn Wells" <shawn(a)redhat.com>
> To: "Martin Preisler" <mpreisle(a)redhat.com>
> Cc: "open-scap-list" <open-scap-list(a)redhat.com>,
scap-workbench(a)lists.fedorahosted.org, "SCAP Security Guide"
> <scap-security-guide(a)lists.fedorahosted.org>
> Sent: Thursday, November 6, 2014 5:33:43 PM
> Subject: Re: Waiver support in HTML report
>
> The post mentions users won't be able to create waivers in the HTML
report
> itself. What's the workflow to introduce a waiver?
I have done initial research on how to implementing adding waivers from
the report.
See the prototype:
https://mpreisle.fedorapeople.org/openscap/interactive_waiver.html
Please note that this is not committed yet. It needs quite some cleanup.
As discussed previously this allows integrations of openscap to preprocess
the HTML report and insert their own callback. That's how they get notified
about added waivers.
A nice accidental feature I discovered today is that you can waive the
report
in firefox and when you "Save as" it saves the report with the waivers.
Could be useful in small deployments.
Known issues:
- score not recomputed
- number of rules that fail, pass, ... isn't recomputed
Feedback appreciated!
--
Martin Preisler
--
SCAP Security Guide mailing list
scap-security-guide(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/