On 7/16/13 1:38 PM, Jeffrey Blank wrote:
Come to think of it, what might be nice for this is to add a check
to
verify-references.py, to display and fixes that aren't backed by a
check. (Actually, verify-input-sanity.pl might be a better place,
considering the input files.)
I'll see what I can do tomorrow, unless somebody else is ambitious.
Since I wasn't sure how far you got on this / if you started, I took a
different approach: output what XCCDF rules don't have remediation:
https://lists.fedorahosted.org/pipermail/scap-security-guide/2013-July/00...