Kuko,
I don’t have answers, but thought you would like to know that your question was extremely
professional, asked specific questions, and demonstrated that you’ve given this some real
effort so far. Thanks for a great question. I’ve learned something from both question and
answer today.
Charlie Todd
Ball Aerospace
On Dec 16, 2019, at 5:44 AM, Kuko Armas <kuko(a)canarytek.com> wrote:
I've been playing with remediation code, and I've seen that remediation code for
many checks fails due to undefined functions as "populate" (to populate defined
variables) and "fix_audit_syscall_rule" (for audit checks)
I've seen that both functions (and many more) are defined inside the datasource, in
group xccdf_org.ssgproject.content_group_remediation_functions
Since I'm a complete newbie in openSCAP, I'm not sure how it should work:
* Is remediation code supposed to be selt-contained in the data source? Or does it
depend on the host having the security-guide package installed ir order to have that
functions code?
* If it's self contained, how and where are the functions code file extracted and
read by remediation code?
* If it's extracted, is there an option to keep the temp files around to take a
look?
* Maybe I need a more recent openscap version? (I'm using 1.2.17-4.el7 in
centos7)
* Should I file an issue on ComplianceAsCode GitHub repo? or am I doing something
wrong?
Thanks a lot!
--
Miguel Armas
CanaryTek Consultoria y Sistemas SL
http://www.canarytek.com/<https://urldefense.proofpoint.com/v2/url?u=h...
_______________________________________________
scap-security-guide mailing list -- scap-security-guide(a)lists.fedorahosted.org
To unsubscribe send an email to scap-security-guide-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://urldefense.proofpoint.com/v2/url?u=https-3A__docs.fedoraproject.o...
List Guidelines:
https://urldefense.proofpoint.com/v2/url?u=https-3A__fedoraproject.org_wi...
List Archives:
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.fedorahosted.o...
This message and any enclosures are intended only for the addressee. Please
notify the sender by email if you are not the intended recipient. If you are
not the intended recipient, you may not use, copy, disclose, or distribute this
message or its contents or enclosures to any other person and any such actions
may be unlawful. Ball reserves the right to monitor and review all messages
and enclosures sent to or from this email address.