"This element is not expected." running oscap

Willem Bos whbos at xs4all.nl
Fri Jul 27 06:57:16 UTC 2012


Hi Kevin,

Just did a pull and oscap runs without any errors. Thanks!

Regards,
Willem.

On Thu, Jul 26, 2012 at 4:23 PM, Willem Bos <whbos at xs4all.nl> wrote:
> Hi Kevin,
>
> Ah, I missed that! After applying the patch there's one error left :
>
> oscap xccdf eval --profile server rhel6-xccdf-scap-security-guide.xml
> ...
> Rule ID:        disable_dhcp_client
> Title:          Disable DHCP Client
> Result:         pass
> OpenSCAP Error: Selector ID(limit_password_reuse) does not exist in Benchmark.
>
> Regards,
> Willem.
>
>
> On Thu, Jul 26, 2012 at 1:43 PM, Kevin Spargur <kspargur at redhat.com> wrote:
>> The patch is still pending an ack before it's gets pushed to the stack.  You
>> can try applying the diff from [PATCH 2/2] Changed group
>> limiting_password_reuse to a rule yourself if you would like.
>>
>> -Kevin
>>
>>
>>
>> On Jul 26, 2012, at 6:34 AM, Willem Bos <whbos at xs4all.nl> wrote:
>>
>> Hi Kevin,
>>
>> I pulled your patch in this morning. That resolved two of the problems
>> I had earlier but not this one. I'm at commit
>> 5454d44eee80becb5c1b8929bf6498edfa3bfdcb :
>>
>> git log
>> commit 5454d44eee80becb5c1b8929bf6498edfa3bfdcb
>> Merge: 405d61e a0f2e7e
>> Author: Kevin Spargur <kspargur at redhat.com>
>> Date:   Wed Jul 25 19:59:05 2012 -0400
>>
>>    Merge branch 'master' of ssh://git.fedorahosted.org/git/scap-securi
>> ...
>>
>> Regards,
>> Willem.
>> On Thu, Jul 26, 2012 at 12:01 PM, Kevin Spargur <kspargur at redhat.com> wrote:
>>
>> Hey, welcome to the list.  I saw the same issue as well.  I believe it
>> relates to the    <oval id="accounts_password_reuse_limit"
>>
>> value="password_history_retain_number"/> shorthand not getting transformed
>> because the parent is a group rather then a rule.  The patch I submitted
>> last night removed the error for me.
>>
>>
>> -Kevin
>>
>>
>>
>>
>>
>>
>> On Jul 26, 2012, at 4:57 AM, Willem Bos <whbos at xs4all.nl> wrote:
>>
>>
>>          <oval id="accounts_password_reuse_limit"
>>
>> value="password_history_retain_number"/>
>>
>> _______________________________________________
>>
>> scap-security-guide mailing list
>>
>> scap-security-guide at lists.fedorahosted.org
>>
>> https://fedorahosted.org/mailman/listinfo/scap-security-guide
>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://fedorahosted.org/mailman/listinfo/scap-security-guide
>>
>>
>> _______________________________________________
>> scap-security-guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://fedorahosted.org/mailman/listinfo/scap-security-guide
>>


More information about the scap-security-guide mailing list