using SCC/CSCC with SSG content

Peter Vrabec pvrabec at redhat.com
Mon Nov 12 15:27:53 UTC 2012


hey Shawn,

I'm taking maturity of OVAL content into consideration. I wanted to 
mention it here just for the record. Well, I have realized that maybe it 
would be better to file a ticket next time? Is it OK?

Peter.



On 11/12/2012 02:47 PM, Shawn Wells wrote:
> On 11/12/12 7:54 AM, Peter Vrabec wrote:
>> Hi Brian,
>>
>> we have identified a bug in our sysctl probe. It explains why it fails
>> for you.
>>
>> tracking at:
>> https://fedorahosted.org/openscap/ticket/271
>>
>> ---
>>
>> Please note that there is also problem in the content. At least
>> "enable_randomize_va_space" is not very robust. It only consider value
>> "1" to be correct, but it could be "2" as well.
>
> Yes, much of the existing OVAL content is infested with suck (and this
> is broadly acknowledged). We focused on getting the XCCDF locked in to
> create the RHEL6 STIG InitialDraft submission, which OVAL was not a part
> of. People will see much more work on the OVAL components through this
> and next week.
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



More information about the scap-security-guide mailing list