first of, I added scap-security-guide list, as that will make more sense
for this kind of questions. open-scap-list is mostly about scanner
issues (and in 99% cases, problem is in content, not in the scanner).
Regarding the problem itself, it would be great if you took a look at
the sources for the oval, maybe you'll be able to find the issue
yourself. As you are on the platform.
To find the source for the issue, I have checked the ID of the rule is
rule_apt_sources_official. So calling this in cloned git repo:
`find . | grep apt_sources_list`
will tell you where are the sources:
is the source for check.
There is no complexity, there just regexes, so if you find an issue,
pull request with the fix would be awesome, but explanation what is the
bug will also do.
On 09/07/2018 07:38 AM, Dhanushka Parakrama wrote:
In Debian 8 */etc/apt/sources.list *file include below repositories
but still *oscap xccdf eval --profile
report.html ssg-debian8-ds.xml * Scan says
*Ensure that official distribution repositories are used * -> *FAIL*
Is there any reason for that ?
Open-scap-list mailing list