oscap hangs on wireless_disable_drivers.xml

Peter Vrabec pvrabec at redhat.com
Tue Aug 28 15:36:03 UTC 2012


Hi all,

Gary is right that pattern is wrong and OpenSCAP behaviour is correct.

# oscap oval collect --id "oval:gov.nist.usgcb.rhel:obj:20129" --syschar 
sys.xml usgcb/usgcb-rhel5desktop-oval.xml
Collected: "oval:gov.nist.usgcb.rhel:obj:20129" : does not exist

If I change the pattern to 
"^/lib/modules/.*/kernel/drivers/net/wireless" I will get
Collected: "oval:gov.nist.usgcb.rhel:obj:20129" : complete



btw. What version of OpenSCAP do you use, Willem?

Peter.


On 08/28/2012 04:12 PM, Gary Gapinski wrote:
> On 08/28/2012 09:11 AM, Steve Grubb wrote:
>> unix-def:path operation="pattern
>> match">^/lib/modules/*/kernel/drivers/usb/storage$</unix-def:path>
>>
>
> If that works properly, it's likely an implementation error in OpenSCAP.
>
> The regex fragment «/*» specifies zero or more slashes.
>
> Probably should be «/[^/]+/».
>
> Regards,
>
> Gary
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>



More information about the scap-security-guide mailing list