----- Original Message -----
From: "Wei Chen (Contractor)(CFPB)"
<Wei.Chen(a)cfpb.gov>
To: mpreisle(a)redhat.com
Cc: scap-security-guide(a)lists.fedorahosted.org
Sent: Friday, August 29, 2014 3:04:23 PM
Subject: RE: New report and guide in openscap 1.1.0
Couple comments on the report layout.
Thanks for your feedback!
• Rules result breakdown - while the color bar breakdown is nice, it
doesn't present precise information at first glance. The user will see 86
passed, 131 failed, and left guessing what that remaining 6 rules are.
It'll be nice to see the total number of rules as well.
I decided to add @title which provides a tooltip. If you hover your mouse
over the progress bar you will get a description what it is and how many rules
are there in total.
See 0fab43d278d10bf260314acea11ec7afd3409dbd
• Failed rules by severity breakdown – similar to rules
results, the
severity description got cut off even though it’s easy to assume that the
two failed rules refer to High severity.
Same as above. See a6b216144500bf147eeab2d5152329505ec8ba8f
• Score – it’ll be nice to have a brief explanation or
reference to how
the scoring is done for those not familiar with the scoring system.
I simply don't have this info in the report. All info I have is the following:
<score system="urn:xccdf:scoring:default"
maximum="100.000000">58.458904</score>
While I could add a link to the specification I think it's not necessary,
do you agree?
I added a tooltip that hints to look at XCCDF specification, see
1d7b370c3194a9103e3d4c95aa5d0dbd3d011dd9
• Section heading – I think the number of “not checked” should
also be
included in the section heading along with fail and unknown. For example, I
could’ve easily missed “Ensure Software Patches Installed” since it was
collapsed within Updating Software section.
Are you sure you mean "notchecked" and not "notselected". We already
show notchecked
rules by default. Either way I am not sure you mean, sorry.
--
Martin Preisler