From: "Shawn Wells" <shawn(a)redhat.com>
To: scap-security-guide(a)lists.fedorahosted.org
Sent: Thursday, September 4, 2014 5:34:01 AM
Subject: Re: SCAP Security Guide - make validate fails after make templates run
On 9/3/14, 4:06 PM, Gabe Alford wrote:
Hello,
Just checking on the latest master, this is appearing to fail because the
'make templates' generates a file permission OVAL check for grub that is not
in the XCCDF. The offending xml file is
file_permissions_boot_grub_grub_conf.xml which if you `rm
file_permissions_boot_grub_grub_conf.xml`. A bug issue can be filed here if
so desired:
https://github.com/OpenSCAP/scap-security-guide/issues
Just reading through the README doc under the templates directory, generally,
you do not want to blindly run `make copy` as some of the checks most likely
have been intentionally edited to add additional checks. Usually building
from source, `make && make validate` (under the scap-security-guide or
RHEL/6 directories) work best if you are just building from the latest
source to run a scan. It just depends on what you are attempting to do. Are
you generating OVAL content, or .....?
pull request awaiting peer review @
https://github.com/OpenSCAP/scap-security-guide/pull/47
Commented & ACKed & merged.
Thanks for the fix.
Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Technologies Team