"This element is not expected." running oscap

Willem Bos whbos at xs4all.nl
Thu Jul 26 14:23:36 UTC 2012


Hi Kevin,

Ah, I missed that! After applying the patch there's one error left :

oscap xccdf eval --profile server rhel6-xccdf-scap-security-guide.xml
...
Rule ID:        disable_dhcp_client
Title:          Disable DHCP Client
Result:         pass
OpenSCAP Error: Selector ID(limit_password_reuse) does not exist in Benchmark.

Regards,
Willem.


On Thu, Jul 26, 2012 at 1:43 PM, Kevin Spargur <kspargur at redhat.com> wrote:
> The patch is still pending an ack before it's gets pushed to the stack.  You
> can try applying the diff from [PATCH 2/2] Changed group
> limiting_password_reuse to a rule yourself if you would like.
>
> -Kevin
>
>
>
> On Jul 26, 2012, at 6:34 AM, Willem Bos <whbos at xs4all.nl> wrote:
>
> Hi Kevin,
>
> I pulled your patch in this morning. That resolved two of the problems
> I had earlier but not this one. I'm at commit
> 5454d44eee80becb5c1b8929bf6498edfa3bfdcb :
>
> git log
> commit 5454d44eee80becb5c1b8929bf6498edfa3bfdcb
> Merge: 405d61e a0f2e7e
> Author: Kevin Spargur <kspargur at redhat.com>
> Date:   Wed Jul 25 19:59:05 2012 -0400
>
>    Merge branch 'master' of ssh://git.fedorahosted.org/git/scap-securi
> ...
>
> Regards,
> Willem.
> On Thu, Jul 26, 2012 at 12:01 PM, Kevin Spargur <kspargur at redhat.com> wrote:
>
> Hey, welcome to the list.  I saw the same issue as well.  I believe it
> relates to the    <oval id="accounts_password_reuse_limit"
>
> value="password_history_retain_number"/> shorthand not getting transformed
> because the parent is a group rather then a rule.  The patch I submitted
> last night removed the error for me.
>
>
> -Kevin
>
>
>
>
>
>
> On Jul 26, 2012, at 4:57 AM, Willem Bos <whbos at xs4all.nl> wrote:
>
>
>          <oval id="accounts_password_reuse_limit"
>
> value="password_history_retain_number"/>
>
> _______________________________________________
>
> scap-security-guide mailing list
>
> scap-security-guide at lists.fedorahosted.org
>
> https://fedorahosted.org/mailman/listinfo/scap-security-guide
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/scap-security-guide
>
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/scap-security-guide
>


More information about the scap-security-guide mailing list